PT-2026-40986 · Julia · Curl Jll+1

Publicado 2026-05-04 · Atualizado 2026-05-04

OSV

libcurl provides the CURLOPT CERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

Identificadores relacionados

JLSEC-2026-390

Produtos afetados

Curl Jll

Libcurl Jll

Referências · 6

• https://osv.dev/vulnerability/JLSEC-2026-390 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20220609-0009 · Nota
• https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html · Nota
• https://hackerone.com/reports/1555441 · Nota
• https://debian.org/security/2022/dsa-5197 · Aviso do Fabricante
• https://security.gentoo.org/glsa/202212-01 · Nota