Oracle fixed 98 MySQL vulnerabilities in October 2026, including CVSS 9.8 bugs CVE-2025-15467 in OpenSSL and CVE-2026-9547 in curl.
curl
The cURL vulnerability reporting policy now routes low and medium severity bugs to public GitHub issues to alleviate maintainer triage burdens.
The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems.
Discover the massive curl v8.21.0 release featuring 18 security patches, many identified by AI models. Upgrade now for enhanced safety and HTTP/3 capabilities.
curl will halt vulnerability reports throughout July 2026, dubbing it a "summer of bliss," and will delay its 8.22.0 release by two weeks.
The cURL project's bug bounty program is overwhelmed by AI-generated, fraudulent vulnerability submissions, leading the lead developer to consider its discontinuation.
Stay informed about the security implications of CVE-2024-11053 in curl. Learn how this vulnerability can potentially compromise user credentials.
CVE-2023-38545 is a severity-high vulnerability that affects both libcurl and the curl tool. This is a serious problem