curl patches CVE-2026-92392, a severe use-after-free found by Anthropic's OSS Scanner
ClaudeDevs · x · 2026-10-20
An early version of Anthropic's OSS Scanner found CVE-2026-92392, a high-severity use-after-free in curl, which has now been patched. Daniel Stenberg called it one of curl's worst vulnerabilities in a long time. First OSS Scanner scans reported 77 critical and 803 high model-rated findings to maintainers.
More from Safety
- Researchers pull real leaked API keys from LLMs using only API output — nordicinst · 2026-10-20
- Microsoft says AI agents should be treated like insider threats as 'frontier models can't be trusted' — TechCrunch AI · 2026-10-20
- Studios Want AI to Mint New Franchises, but Pure AI Content Can't Be Copyrighted — WhatTheLJW · 2026-10-20
- French AI-generated novel axed from Goncourt longlist; writers demand AI text watermarking — zetalyrae · 2026-10-20
- NYC to take 15% of QFab IP proceeds and three board seats in landmark startup deal — MJBiercuk · 2026-10-20
- Fake Anthropic employee accounts run a novel X follow-based phishing scheme — edgarpavlovsky · 2026-10-20