Change #278692
| Category | None |
| Changed by | Stefan Eissing <stefan@eissing.org> |
| Changed at | Tue 18 Aug 2026 08:17:51 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | curl-8.20.X |
| Revision | ddea52f804023b318259a5067e01dc812c8f0822 |
Comments
CVE-2026-9545: exposing HTTP/3 early data [fixed] Cherry-picked from 7b9613fa9b1a5e04301a ngtcp2: fail handshake directly When certificate verification fails, error out of the handshake callback, forcing ngtcp2 to stop processing the connection any further. Closes #21712
Changed files
- lib/vquic/curl_ngtcp2.c