Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-1201 Critical 9.8

Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest**...

JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Packages
CURL_jll < 8.21.0+0
LibCURL_jll < 8.21.0+0

Successfully using libcurl to do a transfer to a specific HTTP origin (hostA) with Digest authentication and then changing the origin to a different one (hostB) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the Authorization: header field meant for hostA, to hostB.

References