Curl 8.22.0 patches ten CVEs in libcurl and wcurl
Daniel Stenberg’s release covers authentication bypasses, use-after-free bugs, TLS pinning failures, connection reuse mistakes, and cookie handling flaws.
By chroot#http
HTTP WG moves to fence off status 402 as x402 spreads
Outside payment projects have assigned their own meaning to the long-reserved code; Mark Nottingham has floated a draft to limit collisions.
By staff