https://seclists.org/oss-sec/2026/q4/154: [SECURITY ADVISORIES] curl 8.23.0
Published Oct 14, 2026
·Updated
Affected Software
1 affected component
curl curl
Frequently Asked Questions
1
Which issue should be prioritized for remediation?
CVE-2026-92392, an HTTP/2 upload use-after-free, is the only vulnerability classified as HIGH severity. The other 23 vulnerabilities in this release are classified as LOW severity.
2
Where can I find the specific fixes and affected-component details?
The advisory states that each vulnerability includes fix information and a link to its corresponding fixing commit. Detailed information is available in curl's security documentation.