Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send.
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send.
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send.
CVE-2026-107928
info leak uploading over WebSockets with GnuTLS
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make ...
GHSA-4c9f-c4pg-phw4
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send.
ALT-PU-2026-18548
ALT-PU-2026-18548: package `curl` update to version 8.23.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send. | CVSS3: 8.1 | 1% Низкий | 19 дней назад |
 | CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send. | CVSS3: 4.8 | 1% Низкий | 26 дней назад |
 | CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send. | CVSS3: 8.1 | 1% Низкий | 19 дней назад |
 | CVE-2026-107928 info leak uploading over WebSockets with GnuTLS | CVSS3: 3.7 | 1% Низкий | 17 дней назад |
| CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make ... | CVSS3: 8.1 | 1% Низкий | 19 дней назад |
| GHSA-4c9f-c4pg-phw4 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send. | CVSS3: 8.1 | 1% Низкий | 19 дней назад |
| ALT-PU-2026-18548 ALT-PU-2026-18548: package `curl` update to version 8.23.0-alt1 | CVSS3: 9.1 | 20 дней назад |
Уязвимостей на страницу