{"cves":["CVE-2026-10536","CVE-2026-5545","CVE-2026-6253","CVE-2026-6429","CVE-2026-7168"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[8.12.1-4.el10_2.7]\n- fix http2 stream dependency tracking security issue (CVE-2026-10536)\n- fix negotiate state check on connection reuse (CVE-2026-5545)\n- fix proxy auth not cleared on proxy change (CVE-2026-7168)\n- fix credentials not cleared on redirect (CVE-2026-6253)\n- fix HTTP credentials leak on cross-origin redirect (CVE-2026-6429)","id":"ELSA-2026-80512","ovalId":"oval:com.oracle.elsa:def:202680512","source":"oracle_linux","title":"ELSA-2026-80512:  curl security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-80512.html"}