agentprime: curl

agentprime: curlEvery new CVE for curl.https://agentprime.io/CVE-2026-107929: local interface connection reuse mixuphttps://agentprime.io/advisories/CVE-2026-107929/https://agentprime.io/advisories/CVE-2026-107929/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:29:28 GMTCVECVE-2026-107928: info leak uploading over WebSockets with GnuTLShttps://agentprime.io/advisories/CVE-2026-107928/https://agentprime.io/advisories/CVE-2026-107928/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:28:17 GMTCVECVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URLhttps://agentprime.io/advisories/CVE-2026-94266/https://agentprime.io/advisories/CVE-2026-94266/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:27:21 GMTCVECVE-2026-94265: Authorization: Negotiate sent to foreign originhttps://agentprime.io/advisories/CVE-2026-94265/https://agentprime.io/advisories/CVE-2026-94265/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:26:18 GMTCVEcriticalCVE-2026-92391: curl_mime_free stack overflow by recursionhttps://agentprime.io/advisories/CVE-2026-92391/https://agentprime.io/advisories/CVE-2026-92391/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:24:10 GMTCVECVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hintshttps://agentprime.io/advisories/CVE-2026-92390/https://agentprime.io/advisories/CVE-2026-92390/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:23:08 GMTCVECVE-2026-92389: TFTP direction confusionhttps://agentprime.io/advisories/CVE-2026-92389/https://agentprime.io/advisories/CVE-2026-92389/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:21:45 GMTCVECVE-2026-92388: FTP wildcard write callback mixuphttps://agentprime.io/advisories/CVE-2026-92388/https://agentprime.io/advisories/CVE-2026-92388/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:20:41 GMTCVEcriticalCVE-2026-92387: never-ending loop via server response omissionhttps://agentprime.io/advisories/CVE-2026-92387/https://agentprime.io/advisories/CVE-2026-92387/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:19:14 GMTCVECVE-2026-92386: server-set cookie aborts cookie jar loadhttps://agentprime.io/advisories/CVE-2026-92386/https://agentprime.io/advisories/CVE-2026-92386/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:17:37 GMTCVECVE-2026-87866: wolfSSL public-key pinning bypasshttps://agentprime.io/advisories/CVE-2026-87866/https://agentprime.io/advisories/CVE-2026-87866/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:16:30 GMTCVEcriticalCVE-2026-87865: knownhost callback mismatches key as missinghttps://agentprime.io/advisories/CVE-2026-87865/https://agentprime.io/advisories/CVE-2026-87865/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:15:13 GMTCVECVE-2026-87863: HSTS response erases persisted entrieshttps://agentprime.io/advisories/CVE-2026-87863/https://agentprime.io/advisories/CVE-2026-87863/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:13:22 GMTCVECVE-2026-87864: IMAP APPEND plus CRLF conversion command injectionhttps://agentprime.io/advisories/CVE-2026-87864/https://agentprime.io/advisories/CVE-2026-87864/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:13:13 GMTCVECVE-2026-87862: HSTS cache import drops longer-lived childhttps://agentprime.io/advisories/CVE-2026-87862/https://agentprime.io/advisories/CVE-2026-87862/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:10:37 GMTCVECVE-2026-87861: cross-origin reuse of a Negotiate connectionhttps://agentprime.io/advisories/CVE-2026-87861/https://agentprime.io/advisories/CVE-2026-87861/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:09:28 GMTCVEcriticalCVE-2026-86415: auto client cert connection reuse mixuphttps://agentprime.io/advisories/CVE-2026-86415/https://agentprime.io/advisories/CVE-2026-86415/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:08:29 GMTCVECVE-2026-86414: leaking host credentials to HTTP proxyhttps://agentprime.io/advisories/CVE-2026-86414/https://agentprime.io/advisories/CVE-2026-86414/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:07:22 GMTCVEcriticalCVE-2026-86413: Negotiate credentials sent to redirected originhttps://agentprime.io/advisories/CVE-2026-86413/https://agentprime.io/advisories/CVE-2026-86413/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:06:11 GMTCVEcriticalCVE-2026-86412: server-set cookie erases cookie jarhttps://agentprime.io/advisories/CVE-2026-86412/https://agentprime.io/advisories/CVE-2026-86412/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:03:28 GMTCVECVE-2026-86411: FTP connection reuse inherits client-certificatehttps://agentprime.io/advisories/CVE-2026-86411/https://agentprime.io/advisories/CVE-2026-86411/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:02:03 GMTCVEcriticalCVE-2026-86410: redirect to SFTP or SCP bypasses host verificationhttps://agentprime.io/advisories/CVE-2026-86410/https://agentprime.io/advisories/CVE-2026-86410/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 19:59:26 GMTCVECVE-2026-86409: stale SigV4 headers sent unintendedhttps://agentprime.io/advisories/CVE-2026-86409/https://agentprime.io/advisories/CVE-2026-86409/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 19:57:01 GMTCVECVE-2026-92392: HTTP/2 upload Use-After-Freehttps://agentprime.io/advisories/CVE-2026-92392/https://agentprime.io/advisories/CVE-2026-92392/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:46:15 GMTCVECVE-2026-82209: domain-scoped PSL domain cookiehttps://agentprime.io/advisories/CVE-2026-82209/https://agentprime.io/advisories/CVE-2026-82209/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:49:35 GMTCVECVE-2026-82208: wolfSSL CA-cache hit overrides callbackhttps://agentprime.io/advisories/CVE-2026-82208/https://agentprime.io/advisories/CVE-2026-82208/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:49:16 GMTCVECVE-2026-80255: secure cookie attribute bypass with tabhttps://agentprime.io/advisories/CVE-2026-80255/https://agentprime.io/advisories/CVE-2026-80255/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:48:54 GMTCVECVE-2026-80231: native CA store conn reusehttps://agentprime.io/advisories/CVE-2026-80231/https://agentprime.io/advisories/CVE-2026-80231/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:48:38 GMTCVECVE-2026-80230: OpenSSL pinning bypasshttps://agentprime.io/advisories/CVE-2026-80230/https://agentprime.io/advisories/CVE-2026-80230/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:48:16 GMTCVECVE-2026-80229: OpenSSL provider use-after-freehttps://agentprime.io/advisories/CVE-2026-80229/https://agentprime.io/advisories/CVE-2026-80229/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:47:59 GMTCVECVE-2026-19931: Negotiate ambient user conn reusehttps://agentprime.io/advisories/CVE-2026-19931/https://agentprime.io/advisories/CVE-2026-19931/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:47:43 GMTCVEcriticalCVE-2026-18924: HTTP/2 server push UAFhttps://agentprime.io/advisories/CVE-2026-18924/https://agentprime.io/advisories/CVE-2026-18924/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:47:27 GMTCVEcriticalCVE-2026-13608: OpenLDAP SASL authentication bypasshttps://agentprime.io/advisories/CVE-2026-13608/https://agentprime.io/advisories/CVE-2026-13608/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 17:47:01 GMTCVECVE-2026-9547: SSH improper host validationhttps://agentprime.io/advisories/CVE-2026-9547/https://agentprime.io/advisories/CVE-2026-9547/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:18:44 GMTCVECVE-2026-9546: sending old refererhttps://agentprime.io/advisories/CVE-2026-9546/https://agentprime.io/advisories/CVE-2026-9546/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:18:14 GMTCVECVE-2026-9545: exposing HTTP/3 early datahttps://agentprime.io/advisories/CVE-2026-9545/https://agentprime.io/advisories/CVE-2026-9545/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:17:55 GMTCVECVE-2026-9080: UAF after pause in socket callbackhttps://agentprime.io/advisories/CVE-2026-9080/https://agentprime.io/advisories/CVE-2026-9080/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:17:34 GMTCVECVE-2026-9079: stale proxy password leakhttps://agentprime.io/advisories/CVE-2026-9079/https://agentprime.io/advisories/CVE-2026-9079/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:16:51 GMTCVEcriticalCVE-2026-8932: incomplete mTLS config matching in conn reusehttps://agentprime.io/advisories/CVE-2026-8932/https://agentprime.io/advisories/CVE-2026-8932/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:16:30 GMTCVECVE-2026-8927: env-set cross-proxy Digest auth state leakhttps://agentprime.io/advisories/CVE-2026-8927/https://agentprime.io/advisories/CVE-2026-8927/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:16:06 GMTCVEcriticalCVE-2026-8926: password leak with netrc and user in URLhttps://agentprime.io/advisories/CVE-2026-8926/https://agentprime.io/advisories/CVE-2026-8926/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:15:45 GMTCVEcriticalCVE-2026-8925: SASL double-freehttps://agentprime.io/advisories/CVE-2026-8925/https://agentprime.io/advisories/CVE-2026-8925/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:15:25 GMTCVEcriticalCVE-2026-8924: trailing dot domain super cookiehttps://agentprime.io/advisories/CVE-2026-8924/https://agentprime.io/advisories/CVE-2026-8924/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:15:04 GMTCVEcriticalCVE-2026-8458: wrong reuse for different serviceshttps://agentprime.io/advisories/CVE-2026-8458/https://agentprime.io/advisories/CVE-2026-8458/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:14:42 GMTCVECVE-2026-8286: wrong STARTTLS connection reusehttps://agentprime.io/advisories/CVE-2026-8286/https://agentprime.io/advisories/CVE-2026-8286/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:14:17 GMTCVECVE-2026-12064: proto-default skips SSH verificationhttps://agentprime.io/advisories/CVE-2026-12064/https://agentprime.io/advisories/CVE-2026-12064/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:13:55 GMTCVECVE-2026-11856: cross-origin Digest auth state leakhttps://agentprime.io/advisories/CVE-2026-11856/https://agentprime.io/advisories/CVE-2026-11856/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:13:31 GMTCVEcriticalCVE-2026-11586: WS Auto-PONG memory exhaustionhttps://agentprime.io/advisories/CVE-2026-11586/https://agentprime.io/advisories/CVE-2026-11586/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:13:04 GMTCVECVE-2026-11564: Native CA trust persisthttps://agentprime.io/advisories/CVE-2026-11564/https://agentprime.io/advisories/CVE-2026-11564/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:12:35 GMTCVEcriticalCVE-2026-11352: QUIC zero-length UDP datagrams busy-loophttps://agentprime.io/advisories/CVE-2026-11352/https://agentprime.io/advisories/CVE-2026-11352/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:12:10 GMTCVE