Alpine/curl: high 7.5
In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext
Action: Upgrade curl to 7.86.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.77.0 | 7.86.0-r0 | - |
Fixed versions
| 7.86.0-r0 |
Sources
published · modified · JSON