CVE-2026-92386
Discovered by AISLEPUBLISHEDCWE-1284
Description
When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file.
CVSS Base Scores
CVSS v3.1(Primary)
4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Version | Status |
|---|---|---|---|
| curl | — | — |