curl 8.23.0 fixes high-severity HTTP/2 upload flaw that can lead to code execution
The curl project released version 8.23.0 to fix CVE-2026-92392, a use-after-free in HTTP/2 uploads affecting curl and libcurl 8.12.0 through 8.22.0.
Cybersecurity news about “libcurl”.
The curl project released version 8.23.0 to fix CVE-2026-92392, a use-after-free in HTTP/2 uploads affecting curl and libcurl 8.12.0 through 8.22.0.