REDHAT-BUG-2476979: Medium severity curl libcurl vulnerability
Published May 13, 2026
·Updated
Successfully using libcurl to do a transfer over a specific HTTP proxy (proxyA) with Digest authentication and then changing the proxy host to a second one (proxyB) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the Proxy-Authorization: header field meant for proxyA, to proxyB.
Affected Software
1 affected component
curl libcurl
Event History
May 13, 2026
Data Sourced
via Red Hat·10:01 AM
DescriptionSeverityAffected Software