curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
A use-after-free flaw in curl's HTTP/2 upload handling, tracked as CVE-2026-92392, affects curl and libcurl 8.12.0 through 8.22.0 and was fixed in curl 8.23.0 on October 14. The reporter, credited as Luna Tong of Anthropic via its OSS Scanner, demonstrated...