{"id":"CVE-2026-94266","published":"2026-10-20T21:17:22.290","lastModified":"2026-10-22T16:57:53.407","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://curl.se/docs/CVE-2026-94266.html","tags":[]},{"url":"https://curl.se/docs/CVE-2026-94266.json","tags":[]},{"url":"https://hackerone.com/reports/4041053","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}