PT-2026-40984 · Julia · Curl Jll+1

Publicado 2026-05-04 · Atualizado 2026-05-04

OSV

A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

Identificadores relacionados

JLSEC-2026-388

Produtos afetados

Curl Jll

Libcurl Jll

Referências · 8

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP · Aviso do Fabricante
• https://security.gentoo.org/glsa/202212-01 · Nota
• https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html · Nota
• https://osv.dev/vulnerability/JLSEC-2026-388 · Aviso do Fabricante
• https://debian.org/security/2022/dsa-5197 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20220609-0008 · Nota
• https://hackerone.com/reports/1547048 · Nota