SecurityLobstersabout 2 hours ago
curl Releases Urgent Fix for HTTP/2 Bug
7 min read
The curl team released version 8.23.0 on September 15 to fix CVE-2026-92392, a high-severity HTTP/2 upload Use-After-Free vulnerability. This bug allows attackers to leak internal client details and execute remote code if specific conditions are met. The team shortened the release cycle from eight to six weeks to address the issue quickly.
Level
Hype check
Tap to vote and see what everyone thinks.