A UAF turned RCE
Summary
The article details a high-severity curl vulnerability CVE-2026-92392 (HTTP/2 upload Use-After-Free), how it can lead to remote code execution, and the mitigation strategy in curl 8.23.0. It also notes discovery by Anthropic's OSS Scanner and the rationale for a faster release cycle.