CURL-CVE-2026-19931
- Source
- https://curl.se/docs/CVE-2026-19931.html
- Import Source
- https://curl.se/docs/CURL-CVE-2026-19931.json
- JSON Data
- https://api.osv.dev/v1/vulns/CURL-CVE-2026-19931
- Aliases
-
- CVE-2026-19931
- Published
- 2026-09-02T08:00:00Z
- Modified
- 2026-09-02T08:04:20.127447Z
- Summary
- Negotiate ambient user conn reuse
- Details
-
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection.
- Database specific
{ "URL": "https://curl.se/docs/CVE-2026-19931.json", "CWE": { "desc": "Exposure of Data Element to Wrong Session", "id": "CWE-488" }, "package": "curl", "affects": "both", "last_affected": "8.21.0", "www": "https://curl.se/docs/CVE-2026-19931.html", "severity": "Medium", "issue": "https://hackerone.com/reports/3923520" }- References
-
- Credits
-
-
- Martin Dukek - FINDER
-
- Stefan Eissing - REMEDIATION_DEVELOPER
-
Affected packages
Git / github.com/curl/curl.git
Affected ranges
- Type
- SEMVER
- Events
-
Introduced7.64.1Fixed8.22.0
- Type
- GIT
- Repo
- https://github.com/curl/curl.git
- Events
Affected versions
7.*
7.64.1
7.65.0
7.65.1
7.65.2
7.65.3
7.66.0
7.67.0
7.68.0
7.69.0
7.69.1
7.70.0
7.71.0
7.71.1
7.72.0
7.73.0
7.74.0
7.75.0
7.76.0
7.76.1
7.77.0
7.78.0
7.79.0
7.79.1
7.80.0
7.81.0
7.82.0
7.83.0
7.83.1
7.84.0
7.85.0
7.86.0
7.87.0
7.88.0
7.88.1
8.*
8.0.0
8.0.1
8.1.0
8.1.1
8.1.2
8.10.0
8.10.1
8.11.0
8.11.1
8.12.0
8.12.1
8.13.0
8.14.0
8.14.1
8.15.0
8.16.0
8.17.0
8.18.0
8.19.0
8.2.0
8.2.1
8.20.0
8.21.0
8.3.0
8.4.0
8.5.0
8.6.0
8.7.0
8.7.1
8.8.0
8.9.0
8.9.1
Other
curl-7_64_1
curl-7_65_0
curl-7_65_1
curl-7_65_2
curl-7_65_3
curl-7_66_0
curl-7_67_0
curl-7_68_0
curl-7_69_0
curl-7_69_1
curl-7_70_0
curl-7_71_0
curl-7_71_1
curl-7_72_0
curl-7_73_0
curl-7_74_0
curl-7_75_0
curl-7_76_0
curl-7_76_1
curl-7_77_0
curl-7_78_0
curl-7_79_0
curl-7_79_1
curl-7_80_0
curl-7_81_0
curl-7_82_0
curl-7_83_0
curl-7_83_1
curl-7_84_0
curl-7_85_0
curl-7_86_0
curl-7_87_0
curl-7_88_0
curl-7_88_1
curl-8_0_0
curl-8_0_1
curl-8_10_0
curl-8_10_1
curl-8_11_0
curl-8_11_1
curl-8_12_0
curl-8_12_1
curl-8_13_0
curl-8_14_0
curl-8_14_1
curl-8_15_0
curl-8_16_0
curl-8_17_0
curl-8_18_0
curl-8_19_0
curl-8_1_0
curl-8_1_1
curl-8_1_2
curl-8_20_0
curl-8_21_0
curl-8_2_0
curl-8_2_1
curl-8_3_0
curl-8_4_0
curl-8_5_0
curl-8_6_0
curl-8_7_0
curl-8_7_1
curl-8_8_0
curl-8_9_0
curl-8_9_1
rc-8_18_0-1
rc-8_18_0-2
rc-8_18_0-3
rc-8_19_0-1
rc-8_19_0-2
rc-8_19_0-3
rc-8_20_0-1
rc-8_20_0-2
rc-8_20_0-3
rc-8_21_0-1
rc-8_21_0-2
rc-8_21_0-3
rc-8_22_0-1
tiny-curl-7_72_0
tiny-curl-8_4_0
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2681.0,
"function_hash": "201743057183082906467307878575002580822"
},
"id": "CURL-CVE-2026-19931-0c13c81b",
"target": {
"function": "multi_runsingle",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 870.0,
"function_hash": "136661135729508702576711888399025174730"
},
"id": "CURL-CVE-2026-19931-100af755",
"target": {
"function": "Curl_cshutdn_setfds",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"325538858812533238041171261567697142839",
"54875728527923121429854059741261500191",
"21903276407825298754560876066802250736",
"298229834482757441282478055837928883095",
"320642209782970470867080816801977190302",
"203925827893795394247285837007630294913",
"4055956547930872387074526863969914977",
"197170647789053952374036040153997495321",
"212592910196254948292668596876356556543",
"15184438282841890316334190459545836062",
"162948357765067628847575305249016028589",
"277578788741907886300096370420126252216",
"295227948296050356057742582471170891380",
"90079072587652923143274646882658317802",
"243884050006319953505336256561987494145",
"132829698235246073835392333905885005947",
"323966384559536568043570191269809190151",
"281758503641098919597495692034216560995",
"326697978790213755626552200590347636860",
"231203426581500495666468137957089353837",
"209299053721446769464983233871195610156",
"191586181207212936676642467848676468824",
"319818454685513810053013368577567993336",
"321038432082444255398464286908903783924",
"214338387522101061120680382771605695626",
"108381590241652212225031393422945815576",
"298405498973337367941422520974537786579",
"30993584306106146864294836422297094902",
"67981107761795461529382505732626360587",
"278924933273590511302638533476010526778",
"315917409192065088531681295739172479753",
"62130592351069585637007172573112504148",
"292463749641885430665881478008473027376",
"102454435319725749468520073221400098249",
"300718462969632445150932937442845086705",
"101269076518437298408163918545688954664",
"170827084003605632987133374454779715218",
"261623679009800900984011529316399332800",
"161482242569178731308628622724556424576",
"283220783610257284589177895829654254841",
"213994383076739587129279730789564593645",
"220432353552892196186116767347413689496",
"12596739186789373798632556356764033302",
"250689397692137534555632602103858210386",
"130039694052147186213869523187626762224",
"156017359039236663600625174726362177784",
"249770077523029609431897574815149592084",
"6885863384372463382490010475179376459",
"128249296696392497111988905742635851178",
"313725610464387002816012914646511014633",
"271755103024975150710881113712526999918",
"232145700682594138911437333817340396319",
"124869386620544303879052986436704639017",
"46770705447983478461618248075942554131",
"234313259204308497153991634784158408166",
"23680804764542922641944939545505391778",
"63902325772708973602449582895397690498",
"134464325136356641519014440813653229471",
"167275555945135703175880067469497916121",
"81665667284969500883348903634279293898",
"327944869829097142799912678444458479668",
"14050754064349988169354231295289910140",
"291263659973353994514062753105699922540",
"62529820055445219664824004886797757861",
"200186371377168166975159511931246759997",
"180235055703290614894551234962975218208",
"53006501359325255020465298292105948388",
"45195660973524408221740579208844184948",
"203013502651304727059807054813296941761",
"45929698025436502623959264980935559706",
"197489478548659789388898741730585875039",
"229396983662050737782035723464601482688",
"325389278615126613662674894913941940364",
"315353775246007403850474606085670853291",
"242951844029892539720508447274509529621",
"290449776215507748168113139954393999295",
"77442233641188774476205751580842477177",
"267664392582133002009968248818381184009",
"222333156739563576903856231323712632923",
"188805670940514689647724270315535467930",
"25886403675547828070898405307344755680",
"224800129103886494406240413069210994368",
"139903408936358831157068393210856135200",
"228492409992577222906266956509565002550",
"133992634058473866771922369787829447928",
"234314455400188697569041574120786315041",
"85246731463860630094196046501253689757",
"102556348546145267735566549612965885656",
"117005473961492373092448050360311868979",
"155410293361999778603647487577976405049",
"30026893916251705548270109588234091581",
"278815357088742022880909228715906331666",
"337510913479409257235081706028049061131"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-1476b3fa",
"target": {
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 348.0,
"function_hash": "99602702983247369466542868834778437233"
},
"id": "CURL-CVE-2026-19931-20ceae92",
"target": {
"function": "Curl_cshutdn_dest_count",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1424.0,
"function_hash": "337295962614474066219211386720271001082"
},
"id": "CURL-CVE-2026-19931-21bd4656",
"target": {
"function": "multi_done_locked",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 511.0,
"function_hash": "146497670572767497003585634115710971935"
},
"id": "CURL-CVE-2026-19931-221b0323",
"target": {
"function": "Curl_cshutdn_add_waitfds",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 266.0,
"function_hash": "117239313957647006210029942177088409422"
},
"id": "CURL-CVE-2026-19931-2406eb86",
"target": {
"function": "cshutdn_update_ev",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 284.0,
"function_hash": "152334292459274115240779860223228867368"
},
"id": "CURL-CVE-2026-19931-25c2b3ef",
"target": {
"function": "Curl_share_unlock",
"file": "lib/curl_share.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"334734287118524083455582616894744389365",
"55503576692795401824884924755312295177",
"52949198621793042165089671985700816668",
"329651188520531319851717484344411043807",
"26040626912678761468458172225999433394",
"68674386706703568779775983451189286372",
"336569371788169691919689648879327896576",
"279060709313521171882591900833729313056",
"234004505474547282641917312163111286815",
"268905440738789259937432492882637740304",
"98356898244009518067323650549858762911",
"65309092942555044186562879210667301775",
"187636155368117180823261582214657133577",
"152522786700838840282607497742124534101",
"233213542422841582848525232954417202000",
"186058667650961738089272590206750830258",
"202419127031603137944896340762595016808",
"25844059799284239300476867930245799350",
"215797161405493493251392069265924154863",
"152522786700838840282607497742124534101",
"233213542422841582848525232954417202000",
"99465073981910099657087014642954942923",
"139587389095556504927369914146400108122",
"277813229126750768878184330822365184638"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-2867a11c",
"target": {
"file": "lib/curl_share.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 295.0,
"function_hash": "279867690020618223401092537855876975589"
},
"id": "CURL-CVE-2026-19931-2a9b04a6",
"target": {
"function": "Curl_cpool_init",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 485.0,
"function_hash": "335561084741251210994352246841586998"
},
"id": "CURL-CVE-2026-19931-2b177c05",
"target": {
"function": "url_match_result",
"file": "lib/url.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 259.0,
"function_hash": "31273115425203792914516606248999159056"
},
"id": "CURL-CVE-2026-19931-30a52fc3",
"target": {
"function": "Curl_cpool_nw_changed",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 672.0,
"function_hash": "201713524929781143701461808834504454351"
},
"id": "CURL-CVE-2026-19931-30f6e897",
"target": {
"function": "share_destroy",
"file": "lib/curl_share.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 482.0,
"function_hash": "338391512807618534647876154179393421813"
},
"id": "CURL-CVE-2026-19931-33b14ff9",
"target": {
"function": "cshutdn_destroy_oldest",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 767.0,
"function_hash": "145365971844678549430716355397796436185"
},
"id": "CURL-CVE-2026-19931-390002ba",
"target": {
"function": "curl_easy_reset",
"file": "lib/easy.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 315.0,
"function_hash": "25162327623838232598697754027501052921"
},
"id": "CURL-CVE-2026-19931-397642cf",
"target": {
"function": "cpool_reap_dead_cb",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"68073869111057935164164654857324777922",
"237863815325564941148523556744448601797",
"235437145153631277612063434221994656797"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-3a8aed8b",
"target": {
"file": "lib/curl_share.h"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 978.0,
"function_hash": "16318708162414623062701218004461658337"
},
"id": "CURL-CVE-2026-19931-40f44de9",
"target": {
"function": "curl_multi_waitfds",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 662.0,
"function_hash": "234722769135112481945809642158929911739"
},
"id": "CURL-CVE-2026-19931-4372769f",
"target": {
"function": "cshutdn_perform",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 3987.0,
"function_hash": "121030974802799980335893866174134527085"
},
"id": "CURL-CVE-2026-19931-45dda1ad",
"target": {
"function": "url_find_or_create_conn",
"file": "lib/url.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 207.0,
"function_hash": "31206951944000808254899234314060548995"
},
"id": "CURL-CVE-2026-19931-488c5ed7",
"target": {
"function": "cpool_find_conn",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 280.0,
"function_hash": "140579436272770990854344505398980827126"
},
"id": "CURL-CVE-2026-19931-4ff07b1f",
"target": {
"function": "cpool_get_instance",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1827.0,
"function_hash": "153207285630557457912291098154604564980"
},
"id": "CURL-CVE-2026-19931-55157ed6",
"target": {
"function": "Curl_cpool_check_limits",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"83684251794030626838913298603162903217",
"169317731552707903916197030191340053030",
"268928128746659298463934614482930892129",
"196301158044671359117069481836284614346"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-5efae0d5",
"target": {
"file": "lib/multiif.h"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 196.0,
"function_hash": "297691929078236024850503990471296473773"
},
"id": "CURL-CVE-2026-19931-5f05b2f1",
"target": {
"function": "Curl_connect_only_attach",
"file": "lib/easy.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"226450672005657723691767475974616614360",
"86259390982675315401053216815571928935",
"50552645965114957750201927887888015058",
"314313972615174247733779726480062268642",
"86264569500639751039008486047341949680"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-5fdacf5b",
"target": {
"file": "lib/getinfo.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"279406017086063224752481101041280545663",
"155614503139889055358645893248707689709",
"4640002181313704388375803226651776227",
"178338055679274198968788094422697701274"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-63363d01",
"target": {
"file": "lib/curl_trc.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2729.0,
"function_hash": "38077669357937006461899187774955666870"
},
"id": "CURL-CVE-2026-19931-683f055d",
"target": {
"function": "getinfo_offt",
"file": "lib/getinfo.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 297.0,
"function_hash": "302660148922889723966474975372272587959"
},
"id": "CURL-CVE-2026-19931-68d72424",
"target": {
"function": "Curl_easy_recv",
"file": "lib/easy.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 349.0,
"function_hash": "222211221913625373790458722690281514778"
},
"id": "CURL-CVE-2026-19931-71aa48c5",
"target": {
"function": "cshutdn_wait",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2777.0,
"function_hash": "319853157472302720116448450669560566885"
},
"id": "CURL-CVE-2026-19931-756951cc",
"target": {
"function": "curl_easy_duphandle",
"file": "lib/easy.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1054.0,
"function_hash": "58992661858235442878517027450013377804"
},
"id": "CURL-CVE-2026-19931-7b453172",
"target": {
"function": "curl_multi_fdset",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 217.0,
"function_hash": "11174520779422000615374551058846833207"
},
"id": "CURL-CVE-2026-19931-7ccf12f4",
"target": {
"function": "cpool_evict_conn",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 956.0,
"function_hash": "105102184252171454669311337342651543435"
},
"id": "CURL-CVE-2026-19931-7f9ecb46",
"target": {
"function": "Curl_conn_terminate",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 849.0,
"function_hash": "187795369433328315543018902644366285721"
},
"id": "CURL-CVE-2026-19931-8a61a119",
"target": {
"function": "Curl_cshutdn_terminate",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 857.0,
"function_hash": "298573606556198476271252914921231408557"
},
"id": "CURL-CVE-2026-19931-8e9faee8",
"target": {
"function": "Curl_cshutdn_add",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"45096577709522554741044055553576391702",
"213801477890278491666931098768445365972",
"230961046989813143452795152810976574271",
"126733757665003548914605570287806382988",
"279446198075249939911063056220627462449",
"36544350420903259697646257901539353169",
"252184956798950429413992276896382572834",
"33571624819915976074765679333140845608",
"256365313748798897789905356660031693887",
"69143683123552867727899447254283237125",
"30068993107207731118175164858079668037",
"179999769425858536182440409503215018563",
"321772171404837515544715732286584919902",
"246604893230541988524603434113506543416",
"232356848973072470690374379022800659593",
"303219701042079634196756691952020775837",
"321772171404837515544715732286584919902",
"39801806315223541708654522596940572669",
"196070202201411914010448362892373933115",
"205858944107953208640743567008184321522",
"321772171404837515544715732286584919902",
"127686397574365816655486929706196562867",
"210383012479768389445129599525144532342",
"220310117535512671171653103795617267026"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-9383ddce",
"target": {
"file": "lib/easy.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 454.0,
"function_hash": "184195224548436219731870837643283707808"
},
"id": "CURL-CVE-2026-19931-9e596a98",
"target": {
"function": "trc_print_ids",
"file": "lib/curl_trc.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"169092082285673526967886106018550487363",
"261902645338966466473635840569401111806",
"113776906639490547671392080367584692038",
"154686831807660707902011796206355127614",
"176432520626670996237053217731356639515",
"244856354235404026411087396776803356049",
"180608574869362882664513228047293316375",
"40048598217857878809192498578736320118",
"156808190457107335732796469712383962693",
"275054365760020368514631071110479297460",
"294154619785435100103738672960162526480",
"216646709858833012096298215744734982832",
"132151551516623839679193043138555263581",
"197856122819885566871450034586054770331",
"273324808130273977995925764475067789094",
"162355930300865956967937710881874374262",
"197448445390891390445547998193359271345",
"5073226559292790416192785990573950926",
"155350304378842052444863589341721101355",
"41676824205146232830921149107860765923",
"41960518088896089174856315109520911538",
"217717937841766823105443227029204841762",
"279131361929960537799966043814195257848",
"110225058198278928228743673029152754227",
"158182575664181720263812274013926219437",
"144100161500741300287166063519158488615",
"171223029716232440516076408735978929127",
"125479108142444169385389079430186172863",
"54499557490190629070161368745626225920",
"222394583491294474364188056567461557237",
"225500180276945403967013282129582960183",
"330301346097682808178789927731802304352",
"210906789938481030161646493071114871425",
"105509594649342350609241210192158076915",
"235462915155593857598615140149263910021",
"181212844205213125598211173733205021978",
"330475429579772405455027103783329433207",
"154042356457251326466972426505497535501",
"16274998730099059137149555012165406908",
"76320981557794471587998306430452574354",
"6141753740576266983188300507627662532",
"103446834041367334265445141118857321918",
"105811421027530222939046228641054722216",
"252112495462272836941001533982769620877",
"269351704262144990002989006583366387688",
"2562557309527560311874473136614594973",
"94429105828895910596700503072639791825",
"107781948823017984134250594217590914466",
"61448123787227860832623649709920093442",
"266952945385134203832831150130992515559",
"20077713706254080062826835745587988341",
"200513877603570237350482847443174017540",
"107975811329432436724250592412311679574",
"336791055226382455284953458025718082204",
"273716377815494505244304274794590854760",
"253273763122963072992702623348548652208",
"223981182271809887891724952386240572607",
"250779825320048591342611048001901516302",
"332408174199983174461249995398402891296",
"184987828220603250937125133162974702515",
"210149952541416344502938343270142746570",
"112536650709185926366621924404795840843",
"78389111739908094324997052587129255835",
"44431271746930541015537157964097086169",
"228078469797155150017625545994794515000",
"326317444124315339169734130373585614216",
"135846760024029063201618213425800041163",
"104846841741803060955092248750038971849",
"48826608060614254837335244167799429374",
"149014524036292697187877512262968759683",
"230487757980434476300939434184002296683",
"145536544717649312252981959621084643753",
"100920888795965662533543142981935103362",
"206702283252548435180182846220640672438",
"255375049211361748782630753888070984245",
"225944920620184455829022368645063194332",
"267788813916373652317355341569653861486",
"44838823546742192322010913577665627742",
"139603276092843652804884133777996963157",
"187899761031903441231032084150151462213",
"37523275325752709058574641721232531177",
"285436830776387127707781664807357366993",
"329068267875349276845854986038923743678",
"325067750478110857497028483949929769778",
"126621411678116843515368997439007403120",
"29622696241940107349442751801312844908",
"164010982219514483164798774643808338344",
"214307227887295066457896543080097001134",
"16752492255666690854792511761386546309",
"111074701258335709838211118750360140384",
"199836841064244237896739458732839083725",
"273553509165553831664285481812124575821",
"139279921622122856173977088027652677164",
"271624942953922952288023461859883734079",
"104554926474807870658798701513681354094",
"310915739135449481229037935399468596200",
"136319413327338032824928311593916394672",
"165783625887715283937052572734863787231",
"182386394727166529066207629947013466950",
"192736483095629116963181323773090577252",
"204363787275175025385076151548031712959",
"261395581146384069588361420298636149345",
"305893311038709797115684103947769995515",
"118647842009379955260950510206911047147",
"164653073152720748097557419711417059262",
"260317838774774298310933173765525133163",
"90313806368708605703978999703176064604",
"84468052407959056730773298958012492142",
"9249504116078896019468521572903890343",
"224506365674363001534378599606097854109",
"122426867452073076153743969552435769368",
"216286922354354358697626485309696176939",
"78010270109921584116464723020320145353",
"98302444278677337716748736806478232307",
"58664534424958152404376154011909335790",
"284715940137112084346189566741618102708",
"46057706371451288742278905778364270397",
"309272449588651652056832333682655132408",
"322721357881443898052246736487228899851",
"87034466138945389889198922855654042807",
"285782845766879772553982183020130925303",
"162270933909698804261023490072105376792",
"212241039226804839056763900136061232327",
"324621448041827653114222506946426590769",
"120506014972827136775461283131248896610",
"120383832108383051239734148250025745676",
"161308205119023812979549368883326359988",
"282315647993384360025802104036487974198",
"217787792105594753497633092411198333188",
"306017239653305111454393290794149334874",
"272033566655765616142432079945045164477",
"12131713354136968021108829440006987973",
"36787785191772336029848559349525232260",
"56212307856144679333855998039063735080",
"44177872770979769311570023314299134442",
"32114222556389673683769674588897571085",
"278106709546800273436154873170187447415",
"276003747201006567724834747465633750742",
"156904065281613124465419801508617613832",
"54948502073030738818902769005628690015",
"262086993232508098286388543614001204393",
"40720454053082243550752502793441406196",
"118589292452198211974045711904561809954",
"65613690932994624159518523574106223397",
"314112665410023099754349456427402271025",
"129997267049218912464022395560649475805",
"39581480984009418751828042633528329425",
"3338592018371270756338626452749618744",
"204684629682266505979777215086612438312",
"306686000181126316339510830562305186771",
"89473824711079661531675070796789547519",
"301963096150200016378060908987119208341",
"79039165932639439944456063956527453197",
"206393041499288695487377870026103764483",
"183170013194463545779912791698430737846",
"225193230149487140896288785738006836425",
"77935872486397087312120924146964523608",
"248278642304268849710715711040535732367",
"9008277108853635045197013482517106211",
"13023112004737040181884782935075237875",
"303352629655372873974051797213182811915",
"85909399068571934876389779112879588472",
"278997094248973524101728134877948651361",
"20667979445560868655061990077664439791",
"337447351362234714196244615984583581152",
"299718073875818807035960923280469240507",
"233594521737012710404623621610187826119",
"14503963138382759387652776282881646917",
"290796700329627423283182803885682220999",
"260493944146767194324239782854534615781",
"332894801124436656044726471666850090884",
"316037412275119849019648812737014833530",
"165092595682989993562635253775805487447",
"86521000882683641327539542197643040300",
"240809938781313573782660812289484380336",
"245787513210441246985542054480062735306",
"297682291305178946400800181990716840371",
"335421644926656899852307820004623303248",
"279562697518791363891543092489795016143",
"317992558999394463359950546560486402298",
"210676007454751443068747696306442903035",
"337954735753415060831503445554571017550",
"333738633192097522415377482536911422931",
"269657303644966573817569453942972353960",
"325567264666931075824848935433481737319",
"58514696313350381791414191358258384463",
"10049872396675248615437808895523684325",
"190480050985751026235218350397310676989",
"147617495895612001560774103117175068618",
"33691447069338408659215745149871032902",
"79447129784329918008456090908928520580",
"242231419416748419685997668274031233964",
"183170013194463545779912791698430737846",
"49921549946945002733334496380912248279",
"113763986484462344901848771262375568154",
"231489206024190507634384528757257507615",
"307230548400854422513480075808774044980",
"175008095778889859668147917023900843700",
"24011304450097664026507916178903513760",
"59900581088323342337340259825870117164",
"279704959431688167115519759537288290567",
"321196273573246183200561076569962346780",
"144425728075443790210534476001781091905",
"187571506842397382461522612782219295199",
"213070959710608426257931474678579214612",
"287107558793985530417647684634396581285",
"15727282728610113818490512876213442237",
"279993636868682370934329562447706143271",
"176244285763707551081481402523665112759",
"164599493034887195267995666888790895556",
"84122751678411901546671948302766598814",
"338128671116635022408550154571558208170",
"308549091346253750094109146735184011459",
"38116419341601097261719097671744438320",
"73185179274617012637435001757850227909",
"264687466246660613338352806284344203317",
"36423670518157445052179447374174325919",
"150047450662393998831151351499916144407",
"269080881063554609854537021496616838575",
"106655428388119356182457225068454828370",
"205360354822932067054340758100427244312",
"308522318202278906338249951057091351086",
"304052271832783881078426548049544266873",
"212944802116269560133760901867596398410",
"125755344139142540733369997313652708243",
"110718389944275627017436358605224271649",
"271431742251100015537210308061067920989",
"133196729766410258827722736645325674432",
"170853217919423885884945068917685032431",
"193621784251136913528298973138787356327",
"156613001541612765289437277327743522242",
"233779901155063997835445798432921558125",
"7941724047556151745359065721846107048",
"207865035723352575516791015178890535596",
"318773977458597372406457504001246902525",
"294522094195320325864538081652397593258",
"78619481552343795063971197489459731067",
"272967508816907501808386699203532781415",
"335061251048904353619239168892538323191",
"231625807921454618841788567878611222777",
"254231098636938775754343251228219776302",
"195129852285794872158100984711035982071",
"45869762600193059541610287900208593693",
"176244285763707551081481402523665112759",
"56504994785657834557561453780277996072",
"89054853454608684869301343376287303041",
"316133184894215667716019548463786516918",
"238547241622555737540585885486245993424",
"180339145319417285641790817438429893580",
"250625371698432870800700650620561592732",
"250105248517555904328027442181530073071",
"278668728793704126803774575605159032786",
"50882120123167727027795464541309007113",
"2166895858983392957782745050909070494",
"321131990972030521874845248165281594867",
"197680892243186320688083527980529604997",
"156498447477815760743306563550997326215",
"222747483706938861595994555391369673936",
"151085664073788164135156696246683486391",
"14464835348347159070550823294431301490",
"286322247195715136956970020591716441062",
"202599630903336399411953371420175814934",
"71012851233624371657895300090002685367",
"249591213392944656754067926931585769255",
"36562519655373217045076017140155799636",
"85542234862980141748531242678388017577",
"310543005703730401169422802782223654540",
"142468336784597677780241299633739851867",
"119549108160829396675192646392882568212",
"139040838935606447459378116164512520271",
"127858558481260511915295231172165150438",
"314886809985587715867290736612258213498",
"324033855315485897953233876713538835429",
"225012357560685996119554018957915557851",
"46814053889840343263439653363966862578",
"38062807723434686775243819865863287604",
"97217132466933224654840386321254690489",
"230988347807137034150395311315470407478",
"67543373166406810932547016329833398560",
"184526633149857755484859304114762635168",
"332006838295268703541956198114798665056",
"177933783998628814279859384625987949347",
"247874110118983102760547889604603981326",
"176496496945179243942693374764705287988",
"202360183075279249135833271325646078543",
"278980332982260290789469600023311208285",
"138747140423108380461480004758470760277",
"171601642392627936048652007573951794613",
"72888397815353205004511609950643594870",
"182057272455248211348629235637226121689",
"331297125320739624193730749309326080892",
"76643515090743510789047719563038000877",
"191033121706242354724076764783158160697",
"117649994681603225484265135070725944714",
"91733607990808087498747268799118988573",
"251376100916867119145078276641912404360",
"201870053305832093524989140661896423024",
"241057995952099866337431057779064589886",
"106860566582649388664017093903337105799",
"258584894399747323693142950286115895288",
"269759836922323491567404516007460161717",
"260731510092399131276487784589430310290",
"1333406729026693626145260027818296337",
"226176865874895966832162542538699990964",
"26799978191126225456731634214655766260",
"208727151473038987417180767428743459528",
"276244648884709235977685792571227234619",
"330924037529454185989567310318128388030",
"80067659665980042929044942575379708920",
"215955386144199036678584237484254859729",
"115217015632471183034491111356357141319"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-a4b1b094",
"target": {
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 232.0,
"function_hash": "111962475424305373378707381903810855627"
},
"id": "CURL-CVE-2026-19931-a665d84e",
"target": {
"function": "Curl_cpool_upkeep",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 435.0,
"function_hash": "68057922820498691593943060200483334171"
},
"id": "CURL-CVE-2026-19931-a6df36f1",
"target": {
"function": "conn_upkeep",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2193.0,
"function_hash": "148718353333249153953586610011606578778"
},
"id": "CURL-CVE-2026-19931-ac0d4fa3",
"target": {
"function": "multi_wait",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2100.0,
"function_hash": "162461007935234387230082688324258205982"
},
"id": "CURL-CVE-2026-19931-ac5a6ff3",
"target": {
"function": "curl_multi_cleanup",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 816.0,
"function_hash": "197804698990486319061413114391818005682"
},
"id": "CURL-CVE-2026-19931-ac5b09fa",
"target": {
"function": "Curl_cpool_conn_now_idle",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 194.0,
"function_hash": "230725820233360788490632666229926266486"
},
"id": "CURL-CVE-2026-19931-ae79f7e5",
"target": {
"function": "Curl_cshutdn_close_oldest",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 601.0,
"function_hash": "80984963126342215646330329082017180155"
},
"id": "CURL-CVE-2026-19931-b0678e28",
"target": {
"function": "Curl_cpool_destroy",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 551.0,
"function_hash": "174632984562832895979106348337654631355"
},
"id": "CURL-CVE-2026-19931-b2cc8dff",
"target": {
"function": "cpool_foreach",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 3026.0,
"function_hash": "172365762716123802850510864165662846221"
},
"id": "CURL-CVE-2026-19931-b470b7e3",
"target": {
"function": "curl_multi_setopt",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"8021683315941729120368508264715183481",
"90834726993137759558453432972194842732",
"236969838669841680529928144339387640224",
"285745395244170394795034075956881725671",
"326810100712062289601794118400246684435"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-b4f82b0f",
"target": {
"file": "lib/urldata.h"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"58509227088366818558917001239278458646",
"227050504101572022983506909275107827463",
"181671083724449676651202027146246671241",
"32632658927842575620661618268455730877",
"84323995121114156270088985432079295790",
"85980271551361003612972557219664713835",
"178131526664399837224414863197878975201",
"294088560948144569271168854804478094037",
"219839815826017763155060940558911634235",
"83403025742493267362242309076998646909",
"39444027869613253159242115616907021376",
"201113582606306039526878008996976306132",
"244741382315862805338708119132894962262",
"112086770680726670268108176039080190201",
"284520028856407306924785086349904756804",
"339823380997258045286123613171993587725",
"148518809927419336980870669652239003041",
"284989698198025727159675980238812289164",
"200051067245907139422445381224427298971",
"172800355990527449790866683967126340041",
"100590650773247364370997951741856548837",
"315390720270525632769900508308638807806",
"172862595073481533872288841919582977238",
"289701585525732312983321189786846659653",
"297397985498644184104841503011901137644",
"310290662758150729271483762206260243668",
"52742456976730588553123172048550221035",
"296857963953228007045301952318209434349",
"139979809250682799503198568310998060157",
"235008367865459726958169997560164228090",
"131806268157926593667340639783568899494",
"135758030657075537591879876333973949983",
"127065904873814858523885660331948942406",
"254198021369081122245933809065958949828",
"329517133609066755879484736548307824904",
"317067430260780677309449475753230280891",
"22776157420050463950653447208403790976",
"191747346736113228450295520243504873507",
"160002732775921113908853369898769000248",
"239720427806115032169089255861402833757",
"54765466075663482208446878858716571760",
"71141848908240105591171175104341203498",
"31891190945315250917264419624049131711",
"105772742299281720255775097992133500407"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-b82dd651",
"target": {
"file": "lib/url.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1373.0,
"function_hash": "10510757878310005398892339784180236339"
},
"id": "CURL-CVE-2026-19931-c2db20a5",
"target": {
"function": "url_attach_existing",
"file": "lib/url.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"43612454721223050442204097925260263197",
"313966200512366229348632376432031018975",
"337140449350979708307854597047269666297",
"115237977554390651715762324178135795539",
"139272135385087802980973082576803216942",
"68951038173696606226755568543493446113",
"179249891976927297179894964862163813809",
"231587537187697784574308856466314292684",
"190779926341137313826512423952820121474",
"303224268837438941182312954955032815681",
"34195055742702091298989595561155697391",
"209199950790814395407829183076355656743",
"187976861834630347236604603850978810250",
"195333710117072702732586437245683737681",
"295247699504562611615240863636826285720",
"16527594965916248117321674684236662009",
"3837090513773466193283140375110898215",
"82577740376170382483815274873705718319",
"147834268498683551668484955196882663134",
"72241915182878218306047952761527697265",
"185977128278886191875735797369846643038",
"265357451770648926129725349390099316256",
"103473624659238097303807166536122672902",
"266610932599047967176527597670532197925",
"245878983057661019435910022921402445985",
"230577316611876258688503169819005021973",
"212232349086841551845051093669630312223",
"130099411855208611800725771529653928001",
"61405189459978237341939063631714458812",
"42562699095273621883134615825679166692",
"201211309528575793306858298789897427996",
"39373741451829090295705434531345686498",
"177400662833958056716383515193330006434"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-c4ed3160",
"target": {
"file": "lib/cshutdn.h"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 162.0,
"function_hash": "116442511713707154469337772983284702519"
},
"id": "CURL-CVE-2026-19931-c583e013",
"target": {
"function": "Curl_cshutdn_count",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 156.0,
"function_hash": "129092582076675017471535149108437684223"
},
"id": "CURL-CVE-2026-19931-ca89a042",
"target": {
"function": "cpool_mark_stale",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2762.0,
"function_hash": "181795341082242302890532780420717298613"
},
"id": "CURL-CVE-2026-19931-cfcb6975",
"target": {
"function": "curl_share_setopt",
"file": "lib/curl_share.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 212.0,
"function_hash": "228488844391956592454906767453158699487"
},
"id": "CURL-CVE-2026-19931-d0244b97",
"target": {
"function": "cpool_reap_no_reuse",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 105.0,
"function_hash": "319350390634592975019109321056430041146"
},
"id": "CURL-CVE-2026-19931-d179e585",
"target": {
"function": "Curl_cshutdn_perform",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 466.0,
"function_hash": "16237109168856025225638788536984364191"
},
"id": "CURL-CVE-2026-19931-d2318005",
"target": {
"function": "Curl_cshutdn_destroy",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"43896561523657245767497498809952385869",
"265340761016822610296963572558270940855",
"220688413061669323203476422318214824329"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-d25f09bf",
"target": {
"file": "lib/url.h"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1050.0,
"function_hash": "83476025725740496928504822113933989669"
},
"id": "CURL-CVE-2026-19931-d5fc25ea",
"target": {
"function": "cshutdn_terminate_all",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 447.0,
"function_hash": "281548972958313753179950993226319278644"
},
"id": "CURL-CVE-2026-19931-d749d1a2",
"target": {
"function": "Curl_cpool_prune_dead",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 251.0,
"function_hash": "241893268902688237281444791242632818484"
},
"id": "CURL-CVE-2026-19931-d7843c9c",
"target": {
"function": "Curl_cshutdn_run_once",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 832.0,
"function_hash": "215091212329922675664750155088346063289"
},
"id": "CURL-CVE-2026-19931-d965978b",
"target": {
"function": "Curl_cpool_conn_seems_healthy",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 302.0,
"function_hash": "97628457642976834940801351221140050644"
},
"id": "CURL-CVE-2026-19931-e18478d8",
"target": {
"function": "Curl_share_lock",
"file": "lib/curl_share.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 536.0,
"function_hash": "313125861612617031991139301530283660341"
},
"id": "CURL-CVE-2026-19931-e19cd03b",
"target": {
"function": "Curl_attach_connection",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"191913015560862388580014342052114996591",
"329654186133677185819860941282919499685",
"288574862708445857496961599835848582640",
"128688060564364152621935819621398479222",
"305966363422131949925383264398033132147",
"231613063709311463794372438412516450185",
"300286310382447148368856865743079100920",
"267706081321340117973092589227239855902",
"317570532541783399108981109853617021836",
"97120357005524430168550848814069217589",
"78041418194906914525612058151136978663",
"261463502433949725838847750820710940988",
"242023698258963455031980359794551417263",
"26553536410175874141244565986856606618",
"307122432848748398830403413854765467617",
"301528410414786267026740054519244343047",
"38835831112959201716683231060770625637",
"151208457578458483422279463409476831227",
"271955127364121347272531269238693157574",
"107179506497217724727661256491587483283",
"189752951152042423143807957434139299118",
"28852445975801990104689403382491253863",
"10996353153333437463398286765202908046",
"215521122458616768810052506142673141409",
"213362568208437755613301844642413916762",
"183415690949158708874649194446046795430",
"116071484887951002598765180240434315052",
"144485669786177107284355156652333419476",
"107078363725465074663478745461286285003",
"227442207227110373940712521266763343805",
"254655456810210918905218672564241656235",
"12598536337899452254009094130084632881",
"22124948382574728734284191614743055821",
"97162959881985887027432675698584682355",
"103285297394034974113710815053816823350",
"185007464831997003273266949847676589261",
"277961371901805219695903010253204797897",
"1632957745894160873043159008726173713",
"256712691698666614668226858592150624779",
"156052067830951037117443259777328930818",
"222657736480253455354360573903915296222",
"36994425038637353714364927738033730058",
"77284832897548454331503581649811130780",
"99153207400461452250212359360448425355",
"104849413868172900287832525016829630025",
"43090857571666590792212210277730141962",
"190462088462328914783838741658157765577",
"119258988697698457769296765622298402469",
"269131725433564921121320901916260566558",
"94783740406177179331567111773043029146",
"320679305652299346578193684593064996986",
"109380888975829276606539381078011443300",
"176364558637162761436801193249818373173",
"4779345717101085537770989765070041429",
"104958084119527895301142153441318768090",
"173040932013611176305158762769071668952",
"200307464292080875099174185207762389066",
"16414176481630258398260216290534806553",
"184868025144948391830592403845581059630",
"314157909983897901802978673680658643121",
"335996176393263842153854167765344020619",
"21445217034353351526158991131265460652",
"17305082547144903775877492431141525785",
"12823230607605996758482204513089492511",
"303118673306619278525417708531550343638",
"248487887390169795693483294821825131162",
"192237453169740240706130788836120163489",
"30540283578623281087394169052989124873",
"39823623004245538432156265100906685711",
"242920369132503076129641735791936943186",
"122880992278859480945615939459348418487",
"244917259903009551735268523121889734347",
"268466344102697420293286103458915288905",
"58603776464546807675086221130822821522",
"209925680390284837792651361138432629254",
"77063523416229114048003287396757490670",
"99845497388892801021083419749435663033",
"11046910167455390530516622241563028969",
"59976284860578146791518424414674361282",
"67469654263426146229792816263229273785",
"315038468939279111037074749981559809224",
"123039539179036062751165474043190831689",
"78311742769268901449094953936906327790",
"322758713547765873883564511107179461960",
"264176369215320074960061961023760849145",
"165004149792726809811373633798851877447",
"304286824591724867060781853482128874335",
"140893763624809709824175152383194300716",
"256377427551535770637971210556890819487",
"190427733086219098740424344366086573352",
"193289030576831375534021570231123657195",
"285354879160332569910296814993233385738",
"56380027469559531155458655837030115518",
"212944758661619107769441046000007144557",
"230954562312572336059639731400108423337",
"321599701131589254828595759861380182673",
"328776514140440051554279174446507993269",
"62133067598015552964091570578296986326",
"96677826970833293039387287525295459252",
"303346909759680850505156977994314370747",
"223812173013643755331593912463676377276",
"46705870231601446567929267866828256376",
"61849939563390658938228480450396559311",
"36318380099881956934294890715440219215",
"326251267909790017874126836466359876369",
"42472476681316934228326005482365323015",
"54956168944163240457618797454153020251",
"241295003698872910067438781189782800057",
"243559632674423334578192177667777504267",
"37860826486569903226375461912486605667",
"4529601276278316979369243175269626499",
"149632848106927994279917883898928503121",
"258915743930794372738475543016847319516",
"125214189419409063379828193747066329216",
"177677174979664251556793670866166461882",
"247772054840455380325938918110516058311",
"237883332129656814635802708420396314015",
"238561354134930101498310115917846993031",
"173128440328196036792197005417666539845",
"230371442361713205734997663001432042945",
"302673149438644841500743562432711304937",
"217142902980244638383961930393831839342",
"193199326424844098859858036143982127905",
"92313484936733276739313063695921136534",
"104297578268841396283389710110557043600",
"150554457248528239243597934349851139567",
"328986013681864290479935249329311403192",
"211249534334235527155874905538800732809",
"192103911716138122946454307291809176994",
"275569251828389952998163274140742567485",
"23187699734882114633960892928337045078",
"178997446236650147643645913701618281436",
"47105160381164312984151317663454238306",
"269881380225362919247016038086586800382",
"227768393919335988857358508144642329569",
"177082357066486229395476004177978387371",
"115533371394850381405389970092296786904",
"57784532137402360554331106837687635953",
"115234981969865773772498236103093545171",
"21738933734654519606040208846356616087",
"166067673867480188862783064912328095118",
"293514171935707382184105491352808000519",
"191001717982113206810230404387002409902",
"208881279956673022605713494275058008524",
"89741193187961302091126228237263158214",
"330850563388591116379534396004449557228",
"78630182834701362314923262843922730359",
"293904047836035846475780982738650618195",
"333586090484533212616974609981847492327",
"62535385792309950045299734892171664037",
"142040948485021334280051525248628182032",
"67280572164229575068173870390124629938",
"176364558637162761436801193249818373173",
"258479935077048300599723752455890762324",
"89657439955101369793390155476691151642",
"277790100049569011965978344398135840623",
"27964020747270956123453962580291853331",
"22188463102610508166153758778523898670",
"308133293356708154383126249555729820605",
"66040163421755972757911803633136871008",
"40877392771301276908370938588858448421",
"331245585634547208079931148205432070860",
"70597663591479895190990629560102185775",
"59449980119763669454626280081192081588",
"23551054512023365148689899784804539430",
"68308846465078386098483100895089851713",
"204912977147720709264670747851304268016",
"316578866717130194340044239136874495237",
"191864515072765797271854304756538033881",
"98307604144855774016634721831476903872",
"242917752838355461440465636305150391661",
"9016542832545594022793924188012307226",
"74498177811014120180542273671668756602",
"232199513160806366437528912730406881530",
"28905439663034135229610238774550495407",
"255319825201310421456771162813882721054",
"233245527589347581282889666422437099325",
"211819468698229138946727720522722531922",
"95779928772365294798425438118553674099",
"265118948125954607963007469944442324096",
"27989504034833395409549648005017903805",
"260610544993114926691168825451375864086",
"51154006699193868556129722269668398920",
"179534433209146511981484213251665273371",
"235917479834038368748085297953492613534",
"19168992392698122095899417247349591483",
"76078815285806694134958128168645392862",
"183379852711077180023082567666673770106",
"298199760835848986042590412756895146350",
"246476929681045681554576018606372513405",
"190467227538532574518280534577701275458",
"36255956896324419015785439639170242954",
"316374911097791548596690852505689219267",
"283957366950778613371065485317195893156",
"189478830254746713468543780946045199866",
"18741267986771433413400663315715573405",
"304895328058269427147334487716618140432",
"208435705586707761879511630899930717022",
"325071520719792339330733390081350078589",
"198486458193021251977333298579485066051",
"81943653934864925792356692034125176846",
"114025501518798453235414821672448484527",
"186834458121094871129450396785443013438",
"128932262938250325996127729278204820137",
"305201347225697597596854485722568841469",
"321692121377425465566972163685179947660",
"301600683042895947235501459356215334597",
"73634835512264093543705749961374237463",
"114007194732865690140605249782381866932",
"10994091019822816119293521262538155396",
"254274069686482668030099398844070170425",
"294696769254139834380505420787941975454",
"25166925735868054482630392312439883741",
"205343469325998223225924398973622522092",
"254926586623789894450602433180808307148",
"294998999949271402526134984582674099629",
"72153034822390526285846171351749344359",
"124666786312117126138790660145545744623",
"297977639417656569061528140667068684449",
"268535953983784826770133420732151200267",
"158412399913321924551132376406719677576",
"201144510337668976004651188363177012637",
"53273639915677034531506825767072425495",
"114007194732865690140605249782381866932",
"281313393492287539067216271111539284613",
"44979270356676776049170971848231292397",
"137259511942079568403213442402900481894",
"176698088088277979307566581543206353798",
"774744094238879032593341891748518449",
"165222228532082788382135476207121878158",
"169944212426220405006900988739599237192",
"247735881355492318503444972384556658187",
"268535953983784826770133420732151200267",
"199380045960609729144125476772105154735",
"338298646647039282973743523887469950578",
"298127245496241693781606895544750567955",
"157753822344222313011014578991383992334",
"201144510337668976004651188363177012637",
"53273639915677034531506825767072425495",
"114007194732865690140605249782381866932",
"281313393492287539067216271111539284613",
"226286585775257838770202573200388578379",
"62533015525917200357549533823753804525"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-e398df95",
"target": {
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 561.0,
"function_hash": "59799796179828757868123890149160318116"
},
"id": "CURL-CVE-2026-19931-e82be47c",
"target": {
"function": "Curl_cshutdn_add_pollfds",
"file": "lib/cshutdn.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 759.0,
"function_hash": "38931748131389868901277831247913022702"
},
"id": "CURL-CVE-2026-19931-ee0e31a3",
"target": {
"function": "cpool_discard_conn",
"file": "lib/conncache.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 288.0,
"function_hash": "97991427614202972634652090195092496785"
},
"id": "CURL-CVE-2026-19931-eef964df",
"target": {
"function": "url_allow_sspi_empty_creds",
"file": "lib/url.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 3114.0,
"function_hash": "161126936697478009772096285182598325576"
},
"id": "CURL-CVE-2026-19931-f3327e4a",
"target": {
"function": "Curl_multi_handle",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 451.0,
"function_hash": "256638881307829554852882731982687302595"
},
"id": "CURL-CVE-2026-19931-f3a18336",
"target": {
"function": "Curl_senddata",
"file": "lib/easy.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"271061996357585214291181638986699623733",
"296570902345412221210688129400006789134",
"26689135858829460899857475051398033941",
"52721395261073949860417339393675150799",
"97333781804405947759561785499590898948",
"56072791251633344340448060633255827384",
"277015185161559486914512734477259615233",
"183252238416091248941009284429197313197",
"57665355224572071865602347182237759529",
"120902158282922780816517812699703291259",
"82636515096679387118673962767107535755",
"159386934361245303445144789030404791882",
"1240376461074178614219879045495973762",
"239034365838339751523914215962322277653",
"35588304015775708791864868394344976248",
"157811238601282063307013440173007294037",
"189445263138436988287628205317662592290",
"196224968929362063191846256087301963591",
"99315254156444782056890602265843813290",
"205577706214866398091373516382548614973",
"212426221747886619508499161185993792551",
"116356718955624313865579064179710726629",
"108272683773901177108104997606048778054",
"34021208612090220949671747249252772729",
"95115794196035462176261016686833337995",
"232625819265190217515825576065990400946",
"56297843440626211365523744769307937082"
],
"threshold": 0.9
},
"id": "CURL-CVE-2026-19931-f5725e8a",
"target": {
"file": "lib/conncache.h"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 356.0,
"function_hash": "260528060756395559362292757686017503750"
},
"id": "CURL-CVE-2026-19931-fdb24648",
"target": {
"function": "Curl_multi_add_perform",
"file": "lib/multi.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 937.0,
"function_hash": "299651822121742166813185406345746839796"
},
"id": "CURL-CVE-2026-19931-fdcea261",
"target": {
"function": "Curl_open",
"file": "lib/url.c"
},
"source": "https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"signature_version": "v1"
}
]
source
"https://curl.se/docs/CURL-CVE-2026-19931.json"
vanir_signatures_modified
"2026-09-02T08:04:20Z"