Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 05:23:40 +0000 certfr-2026-avi-1307 — De multiples vulnérabilités ont été découvertes dans Curl. Certaines d'entre elles permettent à un attaquant de provoqu… https://db.gcve.eu/vuln/certfr-2026-avi-1307 certfr-2026-avi-1307 https://db.gcve.eu/vuln/certfr-2026-avi-1307 fkie_cve-2026-92392 https://db.gcve.eu/vuln/fkie_cve-2026-92392 <p>During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.</p> <p>During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.</p> https://db.gcve.eu/vuln/fkie_cve-2026-92392 GHSA-7jvw-75gf-2h34 https://db.gcve.eu/vuln/ghsa-7jvw-75gf-2h34 <p>During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.</p> <p>During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.</p> https://db.gcve.eu/vuln/ghsa-7jvw-75gf-2h34 RHSA-2026:80349 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update https://db.gcve.eu/vuln/rhsa-2026:80349 <p>curl: curl: HTTP/2 upload Use-After-Free</p> <p>curl: curl: HTTP/2 upload Use-After-Free</p> https://db.gcve.eu/vuln/rhsa-2026:80349