Vulnerability in Curl

CVE-2026-8927

When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against…

Affected products

  • Curl — versions 8.20.0, 8.19.0, 8.18.0

References