Количество 12
Количество 12
CVE-2026-6276
Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them.
CVE-2026-6276
Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them.
CVE-2026-6276
Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them.
CVE-2026-6276
stale custom cookie host causes cookie leak
CVE-2026-6276
Using libcurl, when a custom `Host:` header is first set for an HTTP r ...
GHSA-2jc6-hc33-hv48
Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them.
BDU:2026-09774
Уязвимость библиотеки libcurl программного средства для взаимодействия с серверами cURL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260624-73-0037
Уязвимость curl
openSUSE-SU-2026:20973-1
Security update for curl
SUSE-SU-2026:2703-1
Security update for curl
SUSE-SU-2026:1940-1
Security update for curl
SUSE-SU-2026:1717-1
Security update for curl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-6276 Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
CVE-2026-6276 Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад | |
CVE-2026-6276 Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
CVE-2026-6276 stale custom cookie host causes cookie leak | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
CVE-2026-6276 Using libcurl, when a custom `Host:` header is first set for an HTTP r ... | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
GHSA-2jc6-hc33-hv48 Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
BDU:2026-09774 Уязвимость библиотеки libcurl программного средства для взаимодействия с серверами cURL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
ROS-20260624-73-0037 Уязвимость curl | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад | |
openSUSE-SU-2026:20973-1 Security update for curl | около 2 месяцев назад | |||
SUSE-SU-2026:2703-1 Security update for curl | около 1 месяца назад | |||
SUSE-SU-2026:1940-1 Security update for curl | 3 месяца назад | |||
SUSE-SU-2026:1717-1 Security update for curl | 3 месяца назад |
Уязвимостей на страницу