cvecurllibcurl
BREAKING: Malicious HTTP/2 servers can crash curl during uploads (CVE-2026-92392)
How to fix CVE-2026-92392: upgrade curl and libcurl to 8.23.0 (or 8.14.3, 8.16.2, 8.20.2 on those branches, or your distro's patched build). A malicious HTTP/2 server can trigger a use-after-free during uploads in curl 8.12.0 through 8.22.0.
