curl 8.6

HTTP/2 push headers memory-leak

freeing stack buffer in utf8asn1str

gzip integer overflow

wrong proxy connection reuse with credentials

bad reuse of HTTP Negotiate connection

TLS certificate check bypass with mbedTLS

OCSP stapling bypass with GnuTLS

broken TLS options for threaded LDAPS

QUIC certificate check bypass with wolfSSL

HSTS subdomain overwrites parent cache entry

curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

curl: curl: Information disclosure due to incorrect TLS connection reuse

token leak with redirect and netrc

libssh global known_hosts override

OpenSSL partial chain store policy bypass

bearer token leak on cross-protocol redirect

No QUIC certificate pinning with wolfSSL

missing SFTP host verification with wolfSSH

Usage of disabled protocol

netrc and default credential leak

netrc and redirect credential leak

libssh key passphrase bypass without agent set