SA-2026-052 - libcurl stale Host header cookie leakage (CVE-2026-6276)
Summary A vulnerability in libcurl allows stale Host header state to persist across requests when reusing the same easy handle. If a custom Host: header is set for an initial request and not explicitl...