daniel:// stenberg:// on Nostr: Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown ...
Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.
libcurl is a rather generic LIBRARY - it is used in almost every device on earth, how the heck can we tell how important a particular mistake is for each and every use case? We can't. You need to read the advisory and figure it out yourself.
Published at
2026-10-12 07:51:05 UTCEvent JSON
{
"id": "bde11fc82be4b7a6ee941b26ac217cbd5bc82c34f1798407d6d4d6cb71c0db70",
"pubkey": "783f5e8607f5b88c53c6c6a334445e79376235013841bc40db7c59eeb7b9e94b",
"created_at": 1791791465,
"kind": 1,
"tags": [
[
"t",
"curl"
],
[
"proxy",
"https://mastodon.social/users/bagder/statuses/117426845493633803",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.\n\nlibcurl is a rather generic LIBRARY - it is used in almost every device on earth, how the heck can we tell how important a particular mistake is for each and every use case? We can't. You need to read the advisory and figure it out yourself.",
"sig": "73f831fc8c8dbc1a078cb1de2690d109e4a6052a89e4d6b4f07a971f15c25b8d48e45c84f1fb7a4edaabe4b0f44d209a0f84c095fac7b911520b8bc04ef63894"
}