https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 10:56:18 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1307 certfr-2026-avi-1307 https://db.gcve.eu/vuln/certfr-2026-avi-1307 https://db.gcve.eu/vuln/fkie_cve-2026-86415 <p>libcurl&#39;s connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.</p> <p>libcurl&#39;s connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.</p> https://db.gcve.eu/vuln/fkie_cve-2026-86415 https://db.gcve.eu/vuln/ghsa-4g5c-8qrq-wcmw <p>libcurl&#39;s connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.</p> <p>libcurl&#39;s connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.</p> https://db.gcve.eu/vuln/ghsa-4g5c-8qrq-wcmw