{"id":"CVE-2026-92386","published":"2026-10-20T21:17:21.017","lastModified":"2026-10-22T17:21:57.293","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://curl.se/docs/CVE-2026-92386.html","tags":[]},{"url":"https://curl.se/docs/CVE-2026-92386.json","tags":[]},{"url":"https://hackerone.com/reports/4021979","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}