tocsin

Debian/curl: medium 5.3

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the h

Action: Upgrade curl to 7.88.1-10+deb12u15 or later.

Affected

introducedfixedlast affected
07.88.1-10+deb12u15-

Fixed versions

7.88.1-10+deb12u15

Sources

published · modified · JSON