Alpine/curl: critical 9.1

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set

Action: Upgrade curl to 8.22.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2026-8924#Alpine:v3.23/curl
• https://security.alpinelinux.org/vuln/CVE-2026-8924

published 2026-07-03T07:16:24.793Z · modified 2026-10-18T12:30:04.070729842Z · JSON