Change #278700
| Category | None |
| Changed by | Daniel Stenberg <daniel@haxx.se> |
| Changed at | Wed 19 Aug 2026 13:34:05 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | curl-8.20.X |
| Revision | 0783c6061d1b6a26efbdb89f07c6fbf2a5c49e52 |
Comments
CVE-2026-8926: password leak with netrc and user in URL Fix implemented differently due to lack of Curl_creds - and the original fix is a larger netrc retake. Test 1304 extended in similar spirit as in the original patch.
Changed files
- lib/netrc.c
- tests/unit/unit1304.c