By default, curl automatically responds to WebSocket PING frames. Because curl
lacks an upper bound on memory allocation for unacknowledged frames, a
malicious server can exhaust all available memory by flooding curl with rapid,
sequential PING messages.
2026年9月4日
CVE-2026-11586 [HIGH] – By default, curl automatically responds to WebSocket PING frames. Because curl lacks an up
📑 文章目录
