PT-2026-41002 · Julia · Curl Jll+1
Published
2026-05-04
·
Updated
2026-05-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using
alarm() and siglongjmp(). When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Curl Jll
Libcurl Jll