[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-3805":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":30,"duplicate_of":9,"upstream":33,"downstream":34,"duplicates":63,"related":64,"reserved_at":9,"published_at":75,"modified_at":76,"state":77,"summary":78,"references_raw":86,"kevs":120,"epss":121,"epss_history":124,"metrics":402,"affected":414},"CVE-2026-3805","When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[21],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_9A9C26A81B8DF640","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/3591944","unknown",0.2,false,[],[31,32],"DEBIAN-CVE-2026-3805","ALPINE-CVE-2026-3805",[],[35,37,39,41,43,45,47,49,51,53,55,57,59,60,61],{"_key":36},"SUSE-SU-2026:0879-1",{"_key":38},"SUSE-SU-2026:0885-1",{"_key":40},"OPENSUSE-SU-2026:10371-1",{"_key":42},"SUSE-SU-2026:0903-1",{"_key":44},"SUSE-SU-2026:0911-1",{"_key":46},"SUSE-SU-2026:20668-1",{"_key":48},"SUSE-SU-2026:20722-1",{"_key":50},"SUSE-SU-2026:20760-1",{"_key":52},"OPENSUSE-SU-2026:20404-1",{"_key":54},"SUSE-SU-2026:20918-1",{"_key":56},"UBUNTU-CVE-2026-3805",{"_key":58},"USN-8084-1",{"_key":32},{"_key":31},{"_key":62},"RHSA-2026:6893",[],[65,66,67,68,69,70,71,72,73,74],{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},"2026-03-11T10:09:37.729Z","2026-09-15T06:02:55.871Z","Modified",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":79,"epss_score":80,"severity":81,"severity_score":82,"severity_version":83,"severity_source":84,"severity_vector":85,"severity_status":77},"low",0.00745,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[87,93,98,104,109,115],{"url":88,"sources":89,"tags":91},"https://curl.se/docs/CVE-2026-3805.json",[84,90],"nvd",[92],"Vendor Advisory",{"url":94,"sources":95,"tags":96},"https://curl.se/docs/CVE-2026-3805.html",[84,90],[97,92],"Patch",{"url":25,"sources":99,"tags":100},[84,90],[101,102,103],"Exploit","Issue Tracking","Third Party Advisory",{"url":105,"sources":106,"tags":107},"http://www.openwall.com/lists/oss-security/2026/03/11/4",[84,90],[108,103],"Mailing List",{"url":110,"sources":111,"tags":113},"https://security-tracker.debian.org/tracker/CVE-2026-3805",[112],"osv_debian",[114],"Advisory",{"url":116,"sources":117,"tags":119},"https://security.alpinelinux.org/vuln/CVE-2026-3805",[118],"osv_alpine",[114],[],{"date":122,"score":80,"percentile":123},"2026-09-19",0.53266,[125,129,133,137,140,143,147,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,241,243,246,249,253,256,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,339,342,345,348,351,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399],{"date":126,"score":127,"percentile":128},"2026-03-11",0.00018,0.04161,{"date":130,"score":131,"percentile":132},"2026-03-12",0.00042,0.12427,{"date":134,"score":135,"percentile":136},"2026-03-13",0.00039,0.11356,{"date":138,"score":135,"percentile":139},"2026-03-14",0.1136,{"date":141,"score":135,"percentile":142},"2026-03-15",0.11329,{"date":144,"score":145,"percentile":146},"2026-03-16",0.00041,0.12095,{"date":148,"score":149,"percentile":150},"2026-03-17",0.00054,0.16499,{"date":152,"score":149,"percentile":153},"2026-03-18",0.16507,{"date":155,"score":149,"percentile":156},"2026-03-19",0.16524,{"date":158,"score":149,"percentile":159},"2026-03-20",0.16591,{"date":161,"score":135,"percentile":162},"2026-03-21",0.11681,{"date":164,"score":135,"percentile":165},"2026-03-22",0.11658,{"date":167,"score":135,"percentile":168},"2026-03-23",0.11603,{"date":170,"score":135,"percentile":171},"2026-03-24",0.11588,{"date":173,"score":135,"percentile":174},"2026-03-25",0.11685,{"date":176,"score":135,"percentile":177},"2026-03-26",0.11775,{"date":179,"score":135,"percentile":180},"2026-03-27",0.11802,{"date":182,"score":135,"percentile":183},"2026-03-28",0.11823,{"date":185,"score":135,"percentile":186},"2026-03-29",0.11788,{"date":188,"score":135,"percentile":189},"2026-03-30",0.11759,{"date":191,"score":135,"percentile":192},"2026-03-31",0.11711,{"date":194,"score":135,"percentile":195},"2026-04-01",0.11717,{"date":197,"score":135,"percentile":198},"2026-04-02",0.11837,{"date":200,"score":135,"percentile":201},"2026-04-03",0.11844,{"date":203,"score":135,"percentile":204},"2026-04-04",0.1188,{"date":206,"score":135,"percentile":207},"2026-04-05",0.11859,{"date":209,"score":135,"percentile":210},"2026-04-06",0.11677,{"date":212,"score":135,"percentile":213},"2026-04-07",0.11667,{"date":215,"score":135,"percentile":216},"2026-04-08",0.11752,{"date":218,"score":135,"percentile":219},"2026-04-09",0.11805,{"date":221,"score":135,"percentile":222},"2026-04-10",0.11818,{"date":224,"score":135,"percentile":225},"2026-04-11",0.11817,{"date":227,"score":131,"percentile":228},"2026-04-12",0.12966,{"date":230,"score":131,"percentile":231},"2026-04-13",0.12921,{"date":233,"score":131,"percentile":234},"2026-04-14",0.12794,{"date":236,"score":131,"percentile":237},"2026-04-15",0.12825,{"date":239,"score":131,"percentile":240},"2026-04-16",0.12821,{"date":242,"score":131,"percentile":240},"2026-04-17",{"date":244,"score":131,"percentile":245},"2026-04-18",0.12823,{"date":247,"score":131,"percentile":248},"2026-04-19",0.12786,{"date":250,"score":251,"percentile":252},"2026-04-20",0.00021,0.05628,{"date":254,"score":251,"percentile":255},"2026-04-21",0.05799,{"date":257,"score":258,"percentile":259},"2026-04-22",0.00029,0.08184,{"date":261,"score":258,"percentile":262},"2026-04-23",0.08214,{"date":264,"score":258,"percentile":265},"2026-04-24",0.08115,{"date":267,"score":258,"percentile":268},"2026-04-25",0.08092,{"date":270,"score":258,"percentile":271},"2026-04-26",0.08078,{"date":273,"score":258,"percentile":274},"2026-04-27",0.08066,{"date":276,"score":258,"percentile":277},"2026-04-28",0.08047,{"date":279,"score":258,"percentile":280},"2026-04-29",0.08051,{"date":282,"score":258,"percentile":283},"2026-04-30",0.08057,{"date":285,"score":258,"percentile":286},"2026-05-01",0.08008,{"date":288,"score":258,"percentile":289},"2026-05-02",0.08068,{"date":291,"score":258,"percentile":292},"2026-05-03",0.08049,{"date":294,"score":258,"percentile":295},"2026-05-04",0.08018,{"date":297,"score":258,"percentile":298},"2026-05-05",0.0802,{"date":300,"score":258,"percentile":301},"2026-05-06",0.08032,{"date":303,"score":258,"percentile":304},"2026-05-07",0.08152,{"date":306,"score":258,"percentile":307},"2026-05-08",0.08169,{"date":309,"score":258,"percentile":310},"2026-05-09",0.08218,{"date":312,"score":258,"percentile":313},"2026-05-10",0.08221,{"date":315,"score":258,"percentile":316},"2026-05-11",0.08201,{"date":318,"score":258,"percentile":319},"2026-05-12",0.08228,{"date":321,"score":258,"percentile":322},"2026-05-13",0.08243,{"date":324,"score":258,"percentile":325},"2026-05-14",0.08283,{"date":327,"score":258,"percentile":328},"2026-05-15",0.08284,{"date":330,"score":258,"percentile":331},"2026-05-16",0.08295,{"date":333,"score":258,"percentile":334},"2026-05-17",0.08285,{"date":336,"score":337,"percentile":338},"2026-05-18",0.0003,0.08673,{"date":340,"score":337,"percentile":341},"2026-05-19",0.08648,{"date":343,"score":337,"percentile":344},"2026-05-20",0.08644,{"date":346,"score":337,"percentile":347},"2026-05-21",0.08624,{"date":349,"score":337,"percentile":350},"2026-05-22",0.08908,{"date":352,"score":337,"percentile":353},"2026-05-23",0.08899,{"date":355,"score":337,"percentile":356},"2026-05-24",0.08903,{"date":358,"score":337,"percentile":359},"2026-05-25",0.08891,{"date":361,"score":337,"percentile":362},"2026-05-26",0.08884,{"date":364,"score":337,"percentile":365},"2026-05-27",0.08941,{"date":367,"score":337,"percentile":368},"2026-05-28",0.09076,{"date":370,"score":337,"percentile":371},"2026-05-29",0.09116,{"date":373,"score":337,"percentile":374},"2026-05-30",0.0912,{"date":376,"score":337,"percentile":377},"2026-05-31",0.09102,{"date":379,"score":337,"percentile":380},"2026-06-01",0.09082,{"date":382,"score":337,"percentile":383},"2026-06-02",0.09029,{"date":385,"score":337,"percentile":386},"2026-06-03",0.08981,{"date":388,"score":337,"percentile":389},"2026-06-04",0.08995,{"date":391,"score":337,"percentile":392},"2026-06-05",0.09035,{"date":394,"score":337,"percentile":395},"2026-06-06",0.09053,{"date":397,"score":337,"percentile":398},"2026-06-07",0.09032,{"date":400,"score":337,"percentile":401},"2026-06-08",0.08975,[403,408,410,412],{"source":84,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":404,"cvss_v4_0":9},{"baseScore":82,"baseSeverity":405,"vectorString":85,"impactScore":406,"exploitabilityScore":407},"HIGH",6,10,{"source":90,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":409,"cvss_v4_0":9},{"baseScore":82,"baseSeverity":405,"vectorString":85,"impactScore":406,"exploitabilityScore":407},{"source":112,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":411,"cvss_v4_0":9},{"baseScore":82,"baseSeverity":9,"vectorString":85,"impactScore":406,"exploitabilityScore":407},{"source":118,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":413,"cvss_v4_0":9},{"baseScore":82,"baseSeverity":9,"vectorString":85,"impactScore":406,"exploitabilityScore":407},[415,430,473,484],{"ecosystem":416,"name":417,"vendor":418,"product":417,"cpe_part":9,"purl_type":419,"purl_namespace":418,"purl_name":417,"source":9,"versions":420},"Alpine Linux","curl","alpine","apk",[421,429],{"version":422,"is_range":423,"range_type":424,"version_start":425,"version_start_type":426,"version_end":427,"version_end_type":428,"fixed_in":9},"gte8_13_0_lt8_19_0_r0",true,"ecosystem","8.13.0","including","8.19.0-r0","excluding",{"version":422,"is_range":423,"range_type":424,"version_start":425,"version_start_type":426,"version_end":427,"version_end_type":428,"fixed_in":9},{"ecosystem":9,"name":417,"vendor":417,"product":417,"cpe_part":431,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":432},"a",[433,436,439,442,445,448,451,453,456,459,462,466,467,468,469,470,471,472],{"version":434,"is_range":423,"range_type":84,"version_start":435,"version_start_type":426,"version_end":435,"version_end_type":426,"fixed_in":9},">= 8.18.0, \u003C= 8.18.0","8.18.0",{"version":437,"is_range":423,"range_type":84,"version_start":438,"version_start_type":426,"version_end":438,"version_end_type":426,"fixed_in":9},">= 8.17.0, \u003C= 8.17.0","8.17.0",{"version":440,"is_range":423,"range_type":84,"version_start":441,"version_start_type":426,"version_end":441,"version_end_type":426,"fixed_in":9},">= 8.16.0, \u003C= 8.16.0","8.16.0",{"version":443,"is_range":423,"range_type":84,"version_start":444,"version_start_type":426,"version_end":444,"version_end_type":426,"fixed_in":9},">= 8.15.0, \u003C= 8.15.0","8.15.0",{"version":446,"is_range":423,"range_type":84,"version_start":447,"version_start_type":426,"version_end":447,"version_end_type":426,"fixed_in":9},">= 8.14.1, \u003C= 8.14.1","8.14.1",{"version":449,"is_range":423,"range_type":84,"version_start":450,"version_start_type":426,"version_end":450,"version_end_type":426,"fixed_in":9},">= 8.14.0, \u003C= 8.14.0","8.14.0",{"version":452,"is_range":423,"range_type":84,"version_start":425,"version_start_type":426,"version_end":425,"version_end_type":426,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0",{"version":454,"is_range":423,"range_type":84,"version_start":425,"version_start_type":426,"version_end":455,"version_end_type":428,"fixed_in":9},">= 8.13.0, \u003C 8.14.2","8.14.2",{"version":457,"is_range":423,"range_type":84,"version_start":444,"version_start_type":426,"version_end":458,"version_end_type":428,"fixed_in":9},">= 8.15.0, \u003C 8.16.1","8.16.1",{"version":460,"is_range":423,"range_type":84,"version_start":438,"version_start_type":426,"version_end":461,"version_end_type":428,"fixed_in":9},">= 8.17.0, \u003C 8.19.0","8.19.0",{"version":463,"is_range":423,"range_type":84,"version_start":464,"version_start_type":426,"version_end":465,"version_end_type":428,"fixed_in":9},">= f4831daa9b2a97e8a2921d6b62cc4dfdd0d8646e, \u003C e090be9f73a7a71459ef678c7cc4b1f75e3ea883","f4831daa9b2a97e8a2921d6b62cc4dfdd0d8646e","e090be9f73a7a71459ef678c7cc4b1f75e3ea883",{"version":435,"is_range":28,"range_type":84,"version_start":435,"version_start_type":426,"version_end":435,"version_end_type":426,"fixed_in":9},{"version":438,"is_range":28,"range_type":84,"version_start":438,"version_start_type":426,"version_end":438,"version_end_type":426,"fixed_in":9},{"version":441,"is_range":28,"range_type":84,"version_start":441,"version_start_type":426,"version_end":441,"version_end_type":426,"fixed_in":9},{"version":444,"is_range":28,"range_type":84,"version_start":444,"version_start_type":426,"version_end":444,"version_end_type":426,"fixed_in":9},{"version":447,"is_range":28,"range_type":84,"version_start":447,"version_start_type":426,"version_end":447,"version_end_type":426,"fixed_in":9},{"version":450,"is_range":28,"range_type":84,"version_start":450,"version_start_type":426,"version_end":450,"version_end_type":426,"fixed_in":9},{"version":425,"is_range":28,"range_type":84,"version_start":425,"version_start_type":426,"version_end":425,"version_end_type":426,"fixed_in":9},{"ecosystem":474,"name":417,"vendor":475,"product":417,"cpe_part":9,"purl_type":476,"purl_namespace":475,"purl_name":417,"source":9,"versions":477},"Debian","debian","deb",[478,481],{"version":479,"is_range":423,"range_type":424,"version_start":9,"version_start_type":9,"version_end":480,"version_end_type":428,"fixed_in":9},"lt8_14_1_2+deb13u4","8.14.1-2+deb13u4",{"version":482,"is_range":423,"range_type":424,"version_start":9,"version_start_type":9,"version_end":483,"version_end_type":428,"fixed_in":9},"lt8_19_0_1","8.19.0-1",{"ecosystem":9,"name":417,"vendor":485,"product":417,"cpe_part":431,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":486},"haxx",[487],{"version":488,"is_range":423,"range_type":489,"version_start":425,"version_start_type":426,"version_end":461,"version_end_type":428,"fixed_in":9},"gte8.13.0_lt8.19.0","cpe"]