Каталог CVE

CVE-2026-92391

curl vulnerabilities

[Каталог CVE]

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process.

Критичність
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiansidcurl8.23.0-1Fixed[CVE-2026-92391]
Debiansidcurl8.23.0~rc1-1FixedDistribution-reported fixed boundary[CVE-2026-92391]

Showing 2 fix observations. All 123 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.23curl8.23.0-r0UnknownSource applicability is not established[ALPINE-CVE-2026-92391]
Alpine3.24curl8.23.0-r0UnknownSource applicability is not established[ALPINE-CVE-2026-92391]
DebianbookwormcurlNot reportedAffectedDistribution reports no fix[CVE-2026-92391]
Debianbookwormcurl7.88.1-10+deb12u15Affected[CVE-2026-92391]
Debianbookworm-securitycurl7.88.1-10+deb12u5Affected[CVE-2026-92391]
DebianforkycurlNot reportedAffectedDistribution reports no fix[CVE-2026-92391]
Debianforkycurl8.22.0-1Affected[CVE-2026-92391]
Debiansidcurl8.23.0-1Fixed[CVE-2026-92391]
Debiansidcurl8.23.0~rc1-1FixedDistribution-reported fixed boundary[CVE-2026-92391]
DebiantrixiecurlNot reportedAffectedDistribution reports no fix[CVE-2026-92391]
Debiantrixiecurl8.14.1-2+deb13u5Affected[CVE-2026-92391]
Debiantrixie-securitycurl8.14.1-2+deb13u7Affected[CVE-2026-92391]
Ubuntu22.04curl7.74.0-1.3ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.74.0-1.3ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.80.0-3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.10UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.11UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.13UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.14UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.15UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.16UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.17UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.18UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.19UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.20UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.21UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.22UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.23UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.24UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.25UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.26UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.27UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.29UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.30UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.4UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.6UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.7UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu22.04curl7.81.0-1ubuntu1.8UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.2.1-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.2.1-1ubuntu3.1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.4.0-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.10UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.11UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.12UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.13UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.15UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.16UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.4UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.5UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.6UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.7UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.8UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu10.9UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu8UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu24.04curl8.5.0-2ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.14.1-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.17.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.7UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.04curl8.18.0-1ubuntu2.8UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.10curl8.18.0-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.10curl8.20.0-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.10curl8.20.0-2ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.10curl8.20.0-2ubuntu11UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.10curl8.20.0-2ubuntu11.1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntu26.10curl8.20.0-2ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntunoblecurl8.5.0-2ubuntu10.16UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibcurl3t64-gnutls8.5.0-2ubuntu10.16UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibcurl4-doc8.5.0-2ubuntu10.16UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibcurl4-gnutls-dev8.5.0-2ubuntu10.16UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibcurl4-openssl-dev8.5.0-2ubuntu10.16UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibcurl4t648.5.0-2ubuntu10.16UnknownSource applicability is not establishedProvider not reported
Ubuntuprocurl7.65.3-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.65.3-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.66.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.67.0-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.10UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.11UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.12UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.13UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.14UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.15UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.16UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.18UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.19UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.20UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.21UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.22UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.23UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.24UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm10UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm3UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm4UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm5UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm6UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm7UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.25+esm9UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Ubuntuprocurl7.68.0-1ubuntu2.7UnknownSource applicability is not established[UBUNTU-CVE-2026-92391]
Original provider fields
{
  "package_releases": [
    {
      "name": "curl",
      "status": "fixed",
      "release": "sid",
      "version": "8.23.0-1"
    },
    {
      "name": "curl",
      "status": "vulnerable",
      "release": "forky",
      "version": "8.22.0-1"
    },
    {
      "name": "curl",
      "status": "vulnerable",
      "release": "trixie",
      "version": "8.14.1-2+deb13u5"
    },
    {
      "name": "curl",
      "status": "vulnerable",
      "release": "trixie-security",
      "version": "8.14.1-2+deb13u7"
    },
    {
      "name": "curl",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "7.88.1-10+deb12u15"
    },
    {
      "name": "curl",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "7.88.1-10+deb12u5"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "curl",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "8.23.0~rc1-1"
    },
    {
      "bug": null,
      "name": "curl",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "curl",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "curl",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "curl",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "8.5.0-2ubuntu10.16",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "applicability_unknown": true
    },
    {
      "name": "libcurl3t64-gnutls",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "8.5.0-2ubuntu10.16",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "applicability_unknown": true
    },
    {
      "name": "libcurl4-doc",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "8.5.0-2ubuntu10.16",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "applicability_unknown": true
    },
    {
      "name": "libcurl4-gnutls-dev",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "8.5.0-2ubuntu10.16",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "applicability_unknown": true
    },
    {
      "name": "libcurl4-openssl-dev",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "8.5.0-2ubuntu10.16",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "applicability_unknown": true
    },
    {
      "name": "libcurl4t64",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "8.5.0-2ubuntu10.16",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.68.0-1ubuntu2.25+esm10"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.65.3-1ubuntu3",
        "7.65.3-1ubuntu4",
        "7.66.0-1ubuntu1",
        "7.67.0-2ubuntu1",
        "7.68.0-1ubuntu1",
        "7.68.0-1ubuntu2",
        "7.68.0-1ubuntu2.1",
        "7.68.0-1ubuntu2.2",
        "7.68.0-1ubuntu2.4",
        "7.68.0-1ubuntu2.5",
        "7.68.0-1ubuntu2.6",
        "7.68.0-1ubuntu2.7",
        "7.68.0-1ubuntu2.10",
        "7.68.0-1ubuntu2.11",
        "7.68.0-1ubuntu2.12",
        "7.68.0-1ubuntu2.13",
        "7.68.0-1ubuntu2.14",
        "7.68.0-1ubuntu2.15",
        "7.68.0-1ubuntu2.16",
        "7.68.0-1ubuntu2.18",
        "7.68.0-1ubuntu2.19",
        "7.68.0-1ubuntu2.20",
        "7.68.0-1ubuntu2.21",
        "7.68.0-1ubuntu2.22",
        "7.68.0-1ubuntu2.23",
        "7.68.0-1ubuntu2.24",
        "7.68.0-1ubuntu2.25",
        "7.68.0-1ubuntu2.25+esm2",
        "7.68.0-1ubuntu2.25+esm3",
        "7.68.0-1ubuntu2.25+esm4",
        "7.68.0-1ubuntu2.25+esm5",
        "7.68.0-1ubuntu2.25+esm6",
        "7.68.0-1ubuntu2.25+esm7",
        "7.68.0-1ubuntu2.25+esm9"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-92391",
      "fixed_version": "7.68.0-1ubuntu2.25+esm10",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-92391",
      "provider_updated_at": "2026-10-20T22:56:55.578426177Z",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.81.0-1ubuntu1.30"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "7.74.0-1.3ubuntu2",
        "7.74.0-1.3ubuntu3",
        "7.80.0-3",
        "7.81.0-1",
        "7.81.0-1ubuntu1.1",
        "7.81.0-1ubuntu1.2",
        "7.81.0-1ubuntu1.3",
        "7.81.0-1ubuntu1.4",
        "7.81.0-1ubuntu1.6",
        "7.81.0-1ubuntu1.7",
        "7.81.0-1ubuntu1.8",
        "7.81.0-1ubuntu1.10",
        "7.81.0-1ubuntu1.11",
        "7.81.0-1ubuntu1.13",
        "7.81.0-1ubuntu1.14",
        "7.81.0-1ubuntu1.15",
        "7.81.0-1ubuntu1.16",
        "7.81.0-1ubuntu1.17",
        "7.81.0-1ubuntu1.18",
        "7.81.0-1ubuntu1.19",
        "7.81.0-1ubuntu1.20",
        "7.81.0-1ubuntu1.21",
        "7.81.0-1ubuntu1.22",
        "7.81.0-1ubuntu1.23",
        "7.81.0-1ubuntu1.24",
        "7.81.0-1ubuntu1.25",
        "7.81.0-1ubuntu1.26",
        "7.81.0-1ubuntu1.27",
        "7.81.0-1ubuntu1.29"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-92391",
      "fixed_version": "7.81.0-1ubuntu1.30",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-92391",
      "provider_updated_at": "2026-10-20T22:56:55.578426177Z",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.5.0-2ubuntu10.16"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "8.2.1-1ubuntu3",
        "8.2.1-1ubuntu3.1",
        "8.4.0-2ubuntu1",
        "8.5.0-2ubuntu1",
        "8.5.0-2ubuntu2",
        "8.5.0-2ubuntu8",
        "8.5.0-2ubuntu9",
        "8.5.0-2ubuntu10",
        "8.5.0-2ubuntu10.1",
        "8.5.0-2ubuntu10.2",
        "8.5.0-2ubuntu10.3",
        "8.5.0-2ubuntu10.4",
        "8.5.0-2ubuntu10.5",
        "8.5.0-2ubuntu10.6",
        "8.5.0-2ubuntu10.7",
        "8.5.0-2ubuntu10.8",
        "8.5.0-2ubuntu10.9",
        "8.5.0-2ubuntu10.10",
        "8.5.0-2ubuntu10.11",
        "8.5.0-2ubuntu10.12",
        "8.5.0-2ubuntu10.13",
        "8.5.0-2ubuntu10.15"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-92391",
      "fixed_version": "8.5.0-2ubuntu10.16",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-92391",
      "provider_updated_at": "2026-10-20T22:56:55.578426177Z",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.20.0-2ubuntu11.1"
            }
          ]
        }
      ],
      "release": "26.10",
      "versions": [
        "8.18.0-1ubuntu2",
        "8.20.0-2ubuntu1",
        "8.20.0-2ubuntu3",
        "8.20.0-2ubuntu10",
        "8.20.0-2ubuntu11"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-92391",
      "fixed_version": "8.20.0-2ubuntu11.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-92391",
      "provider_updated_at": "2026-10-20T22:56:55.578426177Z",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.18.0-1ubuntu2.8"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "8.14.1-2ubuntu1",
        "8.17.0-1ubuntu1",
        "8.18.0-1ubuntu1",
        "8.18.0-1ubuntu2",
        "8.18.0-1ubuntu2.1",
        "8.18.0-1ubuntu2.2",
        "8.18.0-1ubuntu2.3",
        "8.18.0-1ubuntu2.4",
        "8.18.0-1ubuntu2.5",
        "8.18.0-1ubuntu2.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-92391",
      "fixed_version": "8.18.0-1ubuntu2.8",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-92391",
      "provider_updated_at": "2026-10-20T22:56:55.578426177Z",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.23.0-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-92391",
      "fixed_version": "8.23.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-92391",
      "provider_updated_at": "2026-10-25T16:30:02.596557992Z",
      "applicability_unknown": true
    },
    {
      "name": "curl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.23.0-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-92391",
      "fixed_version": "8.23.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-92391",
      "provider_updated_at": "2026-10-25T16:30:02.596557992Z",
      "applicability_unknown": true
    }
  ]
}

Publisher notes

[trixie] curl: Minor issue

OpenFactory catalog packages

Зіставлення пакетів триває.

[Debian 12 (Bookworm)]

  • [curl]Невідомо
    Подробиці (6)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl3-gnutls]Невідомо

    Пакет джерела: [curl]

    Подробиці (6)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl3-nss]Невідомо

    Пакет джерела: [curl]

    Подробиці (4)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl4]Невідомо

    Пакет джерела: [curl]

    Подробиці (6)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl4-doc]Невідомо

    Пакет джерела: [curl]

    Подробиці (6)

    • 7.88.1-10+deb12u15 · all · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · all · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · all · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · all · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · all · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · all · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl4-gnutls-dev]Невідомо

    Пакет джерела: [curl]

    Подробиці (6)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl4-nss-dev]Невідомо

    Пакет джерела: [curl]

    Подробиці (4)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

  • [libcurl4-openssl-dev]Невідомо

    Пакет джерела: [curl]

    Подробиці (6)

    • 7.88.1-10+deb12u15 · amd64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u15 · arm64 · bookworm

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · amd64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

    • 7.88.1-10+deb12u5 · arm64 · bookworm-security

      Уражена

      usn · curl · debian · bookworm; usn · curl · debian · 12

[Debian 13 (Trixie)]

  • [curl]Невідомо
    Подробиці (5)

    • 8.14.1-2+deb13u4 · amd64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u4 · arm64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · amd64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · arm64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u7 · amd64 · trixie-security

      Уражена

      usn · curl · debian · 13

  • [libcurl3t64-gnutls]Невідомо

    Пакет джерела: [curl]

    Подробиці (5)

    • 8.14.1-2+deb13u4 · amd64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u4 · arm64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · amd64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · arm64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u7 · amd64 · trixie-security

      Уражена

      usn · curl · debian · 13

  • [libcurl4-doc]Невідомо

    Пакет джерела: [curl]

    Подробиці (5)

    • 8.14.1-2+deb13u4 · all · trixie

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u4 · all · trixie

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · all · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · all · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u7 · all · trixie-security

      Уражена

      usn · curl · debian · 13

  • [libcurl4-gnutls]Невідомо

    Пакет джерела: [curl]

    Подробиці (2)

    • 8.21.0-2~bpo13+1 · amd64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · arm64 · trixie-backports

      Уражена

      usn · curl · debian · 13

  • [libcurl4-gnutls-dev]Невідомо

    Пакет джерела: [curl]

    Подробиці (5)

    • 8.14.1-2+deb13u4 · amd64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u4 · arm64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · amd64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · arm64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u7 · amd64 · trixie-security

      Уражена

      usn · curl · debian · 13

  • [libcurl4-openssl-dev]Невідомо

    Пакет джерела: [curl]

    Подробиці (5)

    • 8.14.1-2+deb13u4 · amd64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u4 · arm64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · amd64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · arm64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u7 · amd64 · trixie-security

      Уражена

      usn · curl · debian · 13

  • [libcurl4t64]Невідомо

    Пакет джерела: [curl]

    Подробиці (5)

    • 8.14.1-2+deb13u4 · amd64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u4 · arm64 · trixie

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · amd64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.21.0-2~bpo13+1 · arm64 · trixie-backports

      Уражена

      usn · curl · debian · 13

    • 8.14.1-2+deb13u7 · amd64 · trixie-security

      Уражена

      usn · curl · debian · 13

Спостережено:

Посилання

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]