Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-438 Medium 6.5

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Packages
CURL_jll < 8.20.0+0
LibCURL_jll < 8.18.0+0
Aliases / Upstream
CVE-2026-3784 GHSA-5q3w-6p3j-mw6p EUVD-2026-11139

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

References