curl fixes high-severity HTTP/2 upload flaw enabling client-side code execution
curl 8.23.0 patches CVE-2026-92392, a use-after-free vulnerability in HTTP/2 uploads that allows malicious servers to execute code on clients.
Daily coverage of AI, developer tools and infrastructure. Each story explains what happened and why it matters, with a link to the original source.
curl 8.23.0 patches CVE-2026-92392, a use-after-free vulnerability in HTTP/2 uploads that allows malicious servers to execute code on clients.