Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

curl could expose data to attackers

published 1 month ago

Summary

The curl tool in version 7.86.0-r0 has a weakness that could let an attacker see data it handles. This problem is fixed in newer releases of curl. Update curl to the latest version to protect your systems.

What to do

Update cleanstart curl to version 7.86.0-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	curl	< 7.86.0-r0 Fix: upgrade to 7.86.0-r0

Original advisory text

Security fix for CVE-2022-35260 applied in: curl 7.86.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2022-35260 URL
https://nvd.nist.gov/vuln/detail/CVE-2022-35260 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-QQ39017 · OSV

Track software like this

Free during beta