Join Nostr
2026-10-12 07:51:05 UTC

daniel:// stenberg:// on Nostr: Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown ...

Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.

libcurl is a rather generic LIBRARY - it is used in almost every device on earth, how the heck can we tell how important a particular mistake is for each and every use case? We can't. You need to read the advisory and figure it out yourself.