Поиск уязвимостей
Количество 20
Количество 20
CVE-2026-3783
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.
CVE-2026-3783
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.
CVE-2026-3783
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.
CVE-2026-3783
token leak with redirect and netrc
CVE-2026-3783
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that ...
GHSA-8whr-249c-vfjp
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.
BDU:2026-04361
Уязвимость программного средства для взаимодействия с серверами cURL, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260410-80-0011
Уязвимость curl
ROS-20260410-73-0014
Уязвимость curl
ALT-PU-2026-7685
ALT-PU-2026-7685: package `curl` update to version 8.12.0-alt2
SUSE-SU-2026:0921-1
Security update for curl
openSUSE-SU-2026:20404-1
Security update for curl
SUSE-SU-2026:0911-1
Security update for curl
SUSE-SU-2026:0903-1
Security update for curl
SUSE-SU-2026:0885-1
Security update for curl
RLSA-2026:55439
Important: curl security update
ELSA-2026-55439
ELSA-2026-55439: curl security update (IMPORTANT)
ELSA-2026-55450
ELSA-2026-55450: curl security update (IMPORTANT)
ALT-PU-2026-4336
ALT-PU-2026-4336: package `curl` update to version 8.19.0-alt1
ALT-PU-2026-18300
ALT-PU-2026-18300: package `libcurl4-openssl` update to version 8.22.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3783 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one. | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-3783 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one. | CVSS3: 5.7 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-3783 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one. | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-3783 token leak with redirect and netrc | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
| CVE-2026-3783 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that ... | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
| GHSA-8whr-249c-vfjp When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one. | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
 | BDU:2026-04361 Уязвимость программного средства для взаимодействия с серверами cURL, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
 | ROS-20260410-80-0011 Уязвимость curl | CVSS3: 5.3 | 0% Низкий | 7 месяцев назад |
| ROS-20260410-73-0014 Уязвимость curl | CVSS3: 5.3 | 0% Низкий | 7 месяцев назад |
| ALT-PU-2026-7685 ALT-PU-2026-7685: package `curl` update to version 8.12.0-alt2 | CVSS3: 5.3 | 0% Низкий | 6 месяцев назад |
 | SUSE-SU-2026:0921-1 Security update for curl | 8 месяцев назад | ||
| openSUSE-SU-2026:20404-1 Security update for curl | 8 месяцев назад | ||
| SUSE-SU-2026:0911-1 Security update for curl | 8 месяцев назад | ||
| SUSE-SU-2026:0903-1 Security update for curl | 8 месяцев назад | ||
| SUSE-SU-2026:0885-1 Security update for curl | 8 месяцев назад | ||
 | RLSA-2026:55439 Important: curl security update | 3 месяца назад | ||
| ELSA-2026-55439 ELSA-2026-55439: curl security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-55450 ELSA-2026-55450: curl security update (IMPORTANT) | 3 месяца назад | ||
| ALT-PU-2026-4336 ALT-PU-2026-4336: package `curl` update to version 8.19.0-alt1 | CVSS3: 7.5 | 8 месяцев назад | |
| ALT-PU-2026-18300 ALT-PU-2026-18300: package `libcurl4-openssl` update to version 8.22.0-alt1 | CVSS3: 9.8 | 26 дней назад |
Уязвимостей на страницу