GHSA-4hjw-pggv-qwfjHighCVSS 8.1

When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make...

Published
October 20, 2026
Last Modified
October 29, 2026

🔗 CVE IDs covered (1)

📋 Description

When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make curl write a record that exceeds its line-length parsing limit. Consequently, any subsequent curl invocation reading from that same cookie jar using --cookie silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file.

🔗 References (5)