| Package | Affected versions | Patched versions |
|---|---|---|
| libcurl | ≤ 7.50.0 |
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free