vulnerability
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
Medium
Summary
A vulnerability in curl (versions 8.12.0 through 8.22.0) allows a malicious server to trigger code execution on the client machine during HTTP/2 uploads. The vulnerability was discovered by Luna Tong of Anthropic using their new OSS Scanner, and the fix was released in curl 8.23.0.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data