Back to article

AISLE Discovers 6 CVEs in curl, Including Oldest Issue Ever (opens in new tab)

Covers 8 stories including Mythos finds a curl vulnerabilityCovered by 5 sources including SecurityWeek, The Hacker NewsDiscussed on Hacker News

Covers 8 related stories

daniel.haxx.se·

Mythos finds a curl vulnerability

Discussed on Hacker News, Lobsters, r/ClaudeAI, r/netsec, and r/programming

curl: [SECURITY ADVISORIES] for curl 8.21.0

incomplete mTLS config matching in conn reuse - CVE-2026-8932

HTTP/2 stream-dependency tree UAF - CVE-2026-10536

SASL double-free - CVE-2026-8925

password leak with netrc and user in URL - CVE-2026-8926

UAF after pause in socket callback - CVE-2026-9080

SSH improper host validation - CVE-2026-9547

Covered in 5 articles

25-Year-Old Vulnerability Patched in Curl

The Hacker News·

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

Security Affairs·

Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet

flyingpenguin·

Still No Evidence Mythos Better at Security Than Self-hosted LLMs

In other languages

Correções no cURL tratam falhas de 25 anos atrás