curl 8.23.0 addresses CVE-2026-92392, a high-severity HTTP/2 upload use-after-free vulnerability that could enable remote code execution. The bug stems from improper memory handling in multiplexed transfer logic, and the authors have introduced safeguards to prevent recurrence.
Background
curl is a foundational tool and library for HTTP/HTTPS transfers, used extensively across web services, APIs, and automation scripts worldwide. Vulnerabilities in curl can have broad impact due to its pervasive adoption in both client and server environments.
- Source
- Lobsters
- Published
- Oct 14, 2026 at 05:44 PM
- Score
- 9.0 / 10