GrepRules
Sign inPublish rule
Explore/cve-2026-49129-curl-meson-build-cwe-918-cve-2026-49129

CVE-2026-49129: Curl Meson Build Cwe 918 Cve 2026 49129

Enabling CURLOPT_FOLLOWLOCATION without restricting allowable redirect protocols via CURLOPT_REDIR_PROTOCOLS_STR allows protocol smuggling or unintended SSRF to internal non-HTTP protocols. This application mitigates the issue by depending on libcurl >= 7.85. The current meson.build file specifies a version constraint older than 7.85, which risks re-introduc

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Generic
greprules fetch cve-2026-49129-curl-meson-build-cwe-918-cve-2026-49129 --engine opengrep

Description

Enabling CURLOPT_FOLLOWLOCATION without restricting allowable redirect protocols via CURLOPT_REDIR_PROTOCOLS_STR allows protocol smuggling or unintended SSRF to internal non-HTTP protocols. This application mitigates the issue by depending on libcurl >= 7.85. The current meson.build file specifies a version constraint older than 7.85, which risks re-introduc

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
141 downloads0 direct141 via packs
· 0 stars · Quality score 53How quality works
Included packs
2 packs