https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T13:55:15.500809+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-8924 CVE-2026-8924 — trailing dot domain super cookie 2026-10-01T13:55:15.502945+00:00

Affected: curl

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.