| Package | Affected versions | Patched versions |
|---|---|---|
| curl | ≥ 7.71.0, < 8.22.0 | 8.22.0 |
A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (`CURLSSLOPT_NATIVE_CA`) than when the connection was created.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free