curl の告知 24 件（2026-10-14）
全部で 24 件、最大深刻度 High。
| 告知 | 公開日 | 重大度 | CVE |
|---|---|---|---|
| local interface connection reuse mixup CVE-2026-107929 | 2026-10-14 | Low | CVE-2026-107929 |
| info leak uploading over WebSockets with GnuTLS CVE-2026-107928 | 2026-10-14 | Low | CVE-2026-107928 |
| password leak in CURLINFO_EFFECTIVE_URL CVE-2026-94266 | 2026-10-14 | Low | CVE-2026-94266 |
| Authorization: Negotiate sent to foreign origin CVE-2026-94265 | 2026-10-14 | Low | CVE-2026-94265 |
| HTTP/2 upload Use-After-Free CVE-2026-92392 | 2026-10-14 | High | CVE-2026-92392 |
| curl_mime_free stack overflow by recursion CVE-2026-92391 | 2026-10-14 | Low | CVE-2026-92391 |
| -J no-clobber guarantee bypassed with 103 early hints CVE-2026-92390 | 2026-10-14 | Low | CVE-2026-92390 |
| TFTP direction confusion CVE-2026-92389 | 2026-10-14 | Low | CVE-2026-92389 |
| FTP wildcard write callback mixup CVE-2026-92388 | 2026-10-14 | Low | CVE-2026-92388 |
| never-ending loop via server response omission CVE-2026-92387 | 2026-10-14 | Low | CVE-2026-92387 |
| server-set cookie aborts cookie jar load CVE-2026-92386 | 2026-10-14 | Low | CVE-2026-92386 |
| wolfSSL public-key pinning bypass CVE-2026-87866 | 2026-10-14 | Low | CVE-2026-87866 |
| knownhost callback mismatches key as missing CVE-2026-87865 | 2026-10-14 | Low | CVE-2026-87865 |
| IMAP APPEND plus CRLF conversion command injection CVE-2026-87864 | 2026-10-14 | Low | CVE-2026-87864 |
| HSTS response erases persisted entries CVE-2026-87863 | 2026-10-14 | Low | CVE-2026-87863 |
| HSTS cache import drops longer-lived child CVE-2026-87862 | 2026-10-14 | Low | CVE-2026-87862 |
| cross-origin reuse of a Negotiate connection CVE-2026-87861 | 2026-10-14 | Low | CVE-2026-87861 |
| auto client cert connection reuse mixup CVE-2026-86415 | 2026-10-14 | Low | CVE-2026-86415 |
| leaking host credentials to HTTP proxy CVE-2026-86414 | 2026-10-14 | Low | CVE-2026-86414 |
| Negotiate credentials sent to redirected origin CVE-2026-86413 | 2026-10-14 | Low | CVE-2026-86413 |
| server-set cookie erases cookie jar CVE-2026-86412 | 2026-10-14 | Low | CVE-2026-86412 |
| FTP connection reuse inherits client-certificate CVE-2026-86411 | 2026-10-14 | Low | CVE-2026-86411 |
| redirect to SFTP or SCP bypasses host verification CVE-2026-86410 | 2026-10-14 | Low | CVE-2026-86410 |
| stale SigV4 headers sent unintended CVE-2026-86409 | 2026-10-14 | Low | CVE-2026-86409 |
こちらで見つけた日
まだ来ていない日付