What is GHSA-p8x5-c6c9-8cwx?

GHSA-p8x5-c6c9-8cwx is a security advisory published by GitHub Security Advisories with Critical severity. The curl logic that works with SASL authentication could end up cleaning up the GSASL context ...

Which CVE IDs does GHSA-p8x5-c6c9-8cwx cover?

GHSA-p8x5-c6c9-8cwx covers the following CVE IDs: CVE-2026-8925. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p8x5-c6c9-8cwx?

GHSA-p8x5-c6c9-8cwx has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-p8x5-c6c9-8cwxCriticalCVSS 9.8

The curl logic that works with SASL authentication could end up cleaning up the GSASL context ...

Vendor

GitHub Security Advisories

Published

July 3, 2026

Last Modified

July 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-8925 →

📋 Description

The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free() the same pointer twice.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-8925
https://hackerone.com/reports/3735193
https://curl.se/docs/CVE-2026-8925.html
https://curl.se/docs/CVE-2026-8925.json
https://github.com/advisories/GHSA-p8x5-c6c9-8cwx