Clarification by the author/maintainer of the project:

https://mastodon.social/@bagder/113657205050547339

FYI: CVE-2024-11053 is *not* a critical security flaw, even if now several security related sites repeat that statement.

This is as good as any reminder that you should read the #curl advisories for #curl issues rather than trusting the scaremongers.

https://curl.se/docs/CVE-2024-11053.html


Related vulnerabilities

Meta
[
  {
    "tags": [
      "vulnerability:information=annotation"
    ]
  }
]