JLSEC-2026-1199

Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-1199.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1199.json
JSON Data
https://api.osv.dev/v1/vulns/JLSEC-2026-1199
Upstream
  • EUVD-2026-41499
  • GHSA-hf82-6jff-f22v
Published
2026-08-07T20:11:58.984Z
Modified
2026-08-07T20:28:41.269920463Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse...
Details

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup.

An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.

Database specific
{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-11564",
            "modified": "2026-07-07T18:00:35.840Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11564",
            "id": "CVE-2026-11564",
            "published": "2026-07-03T07:16:23.790Z",
            "imported": "2026-08-07T19:54:38.760Z",
            "database_specific": {
                "status": "Analyzed"
            }
        },
        {
            "modified": "2026-07-07T18:31:40Z",
            "html_url": "https://github.com/advisories/GHSA-hf82-6jff-f22v",
            "id": "GHSA-hf82-6jff-f22v",
            "published": "2026-07-03T09:31:25Z",
            "url": "https://api.github.com/advisories/GHSA-hf82-6jff-f22v",
            "imported": "2026-08-07T19:56:03.528Z"
        },
        {
            "modified": "2026-07-06T17:10:33Z",
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41499",
            "id": "EUVD-2026-41499",
            "published": "2026-07-03T06:12:35Z",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-41499",
            "imported": "2026-08-07T19:54:56.217Z"
        }
    ]
}
References

Affected packages

Julia / CURL_jll

Package

Name
CURL_jll
Purl
pkg:julia/CURL_jll?uuid=b21e61f3-bafc-59ac-ab14-4c5c62d6588d

Affected ranges

Type
SEMVER
Events
Introduced
8.17.0+0
Fixed
8.21.0+0

Database specific

source
"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1199.json"

Julia / LibCURL_jll

Package

Name
LibCURL_jll
Purl
pkg:julia/LibCURL_jll?uuid=deac9b47-8bc7-5906-a0fe-35ac56dc84c0

Affected ranges

Type
SEMVER
Events
Introduced
8.17.0+0
Fixed
8.21.0+0

Database specific

source
"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1199.json"