Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-1218 Critical 9.8

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Packages
CURL_jll >= 8.9.0+0, < 8.21.0+0
LibCURL_jll >= 8.8.0+0, < 8.21.0+0
Upstream
CVE-2026-9079 GHSA-f4cv-xm48-3694 EUVD-2026-41510

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.

References