{"id":"CURL-CVE-2026-19931","summary":"Negotiate ambient user conn reuse","details":"A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B's request get sent over user A's\npreviously authenticated connection.","aliases":["CVE-2026-19931"],"modified":"2026-09-02T08:04:20.127447Z","published":"2026-09-02T08:00:00Z","database_specific":{"URL":"https://curl.se/docs/CVE-2026-19931.json","affects":"both","issue":"https://hackerone.com/reports/3923520","last_affected":"8.21.0","package":"curl","severity":"Medium","www":"https://curl.se/docs/CVE-2026-19931.html","CWE":{"desc":"Exposure of Data Element to Wrong Session","id":"CWE-488"}},"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"7.64.1"},{"fixed":"8.22.0"}]},{"type":"GIT","repo":"https://github.com/curl/curl.git","events":[{"introduced":"6c6035532383e300c712e4c1cd9fdd749ed5cf59"},{"fixed":"7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"}]}],"versions":["8.21.0","8.20.0","8.19.0","8.18.0","8.17.0","8.16.0","8.15.0","8.14.1","8.14.0","8.13.0","8.12.1","8.12.0","8.11.1","8.11.0","8.10.1","8.10.0","8.9.1","8.9.0","8.8.0","8.7.1","8.7.0","8.6.0","8.5.0","8.4.0","8.3.0","8.2.1","8.2.0","8.1.2","8.1.1","8.1.0","8.0.1","8.0.0","7.88.1","7.88.0","7.87.0","7.86.0","7.85.0","7.84.0","7.83.1","7.83.0","7.82.0","7.81.0","7.80.0","7.79.1","7.79.0","7.78.0","7.77.0","7.76.1","7.76.0","7.75.0","7.74.0","7.73.0","7.72.0","7.71.1","7.71.0","7.70.0","7.69.1","7.69.0","7.68.0","7.67.0","7.66.0","7.65.3","7.65.2","7.65.1","7.65.0","7.64.1","rc-8_22_0-1","curl-8_21_0","rc-8_21_0-3","rc-8_21_0-2","rc-8_21_0-1","curl-8_20_0","rc-8_20_0-3","rc-8_20_0-2","rc-8_20_0-1","curl-8_19_0","rc-8_19_0-3","rc-8_19_0-2","rc-8_19_0-1","curl-8_18_0","rc-8_18_0-3","rc-8_18_0-2","rc-8_18_0-1","curl-8_17_0","curl-8_16_0","curl-8_15_0","curl-8_14_1","curl-8_14_0","curl-8_13_0","curl-8_12_1","curl-8_12_0","curl-8_11_1","curl-8_11_0","curl-8_10_1","curl-8_10_0","curl-8_9_1","curl-8_9_0","curl-8_8_0","curl-8_7_1","curl-8_7_0","curl-8_6_0","curl-8_5_0","tiny-curl-8_4_0","curl-8_4_0","curl-8_3_0","curl-8_2_1","curl-8_2_0","curl-8_1_2","curl-8_1_1","curl-8_1_0","curl-8_0_1","curl-8_0_0","curl-7_88_1","curl-7_88_0","curl-7_87_0","curl-7_86_0","curl-7_85_0","curl-7_84_0","curl-7_83_1","curl-7_83_0","curl-7_82_0","curl-7_81_0","curl-7_80_0","curl-7_79_1","curl-7_79_0","curl-7_78_0","curl-7_77_0","curl-7_76_1","curl-7_76_0","curl-7_75_0","curl-7_74_0","curl-7_73_0","tiny-curl-7_72_0","curl-7_72_0","curl-7_71_1","curl-7_71_0","curl-7_70_0","curl-7_69_1","curl-7_69_0","curl-7_68_0","curl-7_67_0","curl-7_66_0","curl-7_65_3","curl-7_65_2","curl-7_65_1","curl-7_65_0","curl-7_64_1"],"database_specific":{"source":"https://curl.se/docs/CURL-CVE-2026-19931.json","vanir_signatures_modified":"2026-09-02T08:04:20Z","vanir_signatures":[{"id":"CURL-CVE-2026-19931-0c13c81b","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c","function":"multi_runsingle"},"deprecated":false,"digest":{"function_hash":"201743057183082906467307878575002580822","length":2681}},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_setfds"},"deprecated":false,"digest":{"function_hash":"136661135729508702576711888399025174730","length":870},"id":"CURL-CVE-2026-19931-100af755","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["325538858812533238041171261567697142839","54875728527923121429854059741261500191","21903276407825298754560876066802250736","298229834482757441282478055837928883095","320642209782970470867080816801977190302","203925827893795394247285837007630294913","4055956547930872387074526863969914977","197170647789053952374036040153997495321","212592910196254948292668596876356556543","15184438282841890316334190459545836062","162948357765067628847575305249016028589","277578788741907886300096370420126252216","295227948296050356057742582471170891380","90079072587652923143274646882658317802","243884050006319953505336256561987494145","132829698235246073835392333905885005947","323966384559536568043570191269809190151","281758503641098919597495692034216560995","326697978790213755626552200590347636860","231203426581500495666468137957089353837","209299053721446769464983233871195610156","191586181207212936676642467848676468824","319818454685513810053013368577567993336","321038432082444255398464286908903783924","214338387522101061120680382771605695626","108381590241652212225031393422945815576","298405498973337367941422520974537786579","30993584306106146864294836422297094902","67981107761795461529382505732626360587","278924933273590511302638533476010526778","315917409192065088531681295739172479753","62130592351069585637007172573112504148","292463749641885430665881478008473027376","102454435319725749468520073221400098249","300718462969632445150932937442845086705","101269076518437298408163918545688954664","170827084003605632987133374454779715218","261623679009800900984011529316399332800","161482242569178731308628622724556424576","283220783610257284589177895829654254841","213994383076739587129279730789564593645","220432353552892196186116767347413689496","12596739186789373798632556356764033302","250689397692137534555632602103858210386","130039694052147186213869523187626762224","156017359039236663600625174726362177784","249770077523029609431897574815149592084","6885863384372463382490010475179376459","128249296696392497111988905742635851178","313725610464387002816012914646511014633","271755103024975150710881113712526999918","232145700682594138911437333817340396319","124869386620544303879052986436704639017","46770705447983478461618248075942554131","234313259204308497153991634784158408166","23680804764542922641944939545505391778","63902325772708973602449582895397690498","134464325136356641519014440813653229471","167275555945135703175880067469497916121","81665667284969500883348903634279293898","327944869829097142799912678444458479668","14050754064349988169354231295289910140","291263659973353994514062753105699922540","62529820055445219664824004886797757861","200186371377168166975159511931246759997","180235055703290614894551234962975218208","53006501359325255020465298292105948388","45195660973524408221740579208844184948","203013502651304727059807054813296941761","45929698025436502623959264980935559706","197489478548659789388898741730585875039","229396983662050737782035723464601482688","325389278615126613662674894913941940364","315353775246007403850474606085670853291","242951844029892539720508447274509529621","290449776215507748168113139954393999295","77442233641188774476205751580842477177","267664392582133002009968248818381184009","222333156739563576903856231323712632923","188805670940514689647724270315535467930","25886403675547828070898405307344755680","224800129103886494406240413069210994368","139903408936358831157068393210856135200","228492409992577222906266956509565002550","133992634058473866771922369787829447928","234314455400188697569041574120786315041","85246731463860630094196046501253689757","102556348546145267735566549612965885656","117005473961492373092448050360311868979","155410293361999778603647487577976405049","30026893916251705548270109588234091581","278815357088742022880909228715906331666","337510913479409257235081706028049061131"],"threshold":0.9},"id":"CURL-CVE-2026-19931-1476b3fa","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_dest_count"},"deprecated":false,"digest":{"function_hash":"99602702983247369466542868834778437233","length":348},"id":"CURL-CVE-2026-19931-20ceae92","signature_type":"Function"},{"id":"CURL-CVE-2026-19931-21bd4656","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c","function":"multi_done_locked"},"deprecated":false,"digest":{"length":1424,"function_hash":"337295962614474066219211386720271001082"}},{"id":"CURL-CVE-2026-19931-221b0323","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_add_waitfds"},"deprecated":false,"digest":{"function_hash":"146497670572767497003585634115710971935","length":511}},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"cshutdn_update_ev"},"deprecated":false,"digest":{"function_hash":"117239313957647006210029942177088409422","length":266},"id":"CURL-CVE-2026-19931-2406eb86","signature_type":"Function"},{"target":{"file":"lib/curl_share.c","function":"Curl_share_unlock"},"deprecated":false,"digest":{"function_hash":"152334292459274115240779860223228867368","length":284},"id":"CURL-CVE-2026-19931-25c2b3ef","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/curl_share.c"},"deprecated":false,"digest":{"line_hashes":["334734287118524083455582616894744389365","55503576692795401824884924755312295177","52949198621793042165089671985700816668","329651188520531319851717484344411043807","26040626912678761468458172225999433394","68674386706703568779775983451189286372","336569371788169691919689648879327896576","279060709313521171882591900833729313056","234004505474547282641917312163111286815","268905440738789259937432492882637740304","98356898244009518067323650549858762911","65309092942555044186562879210667301775","187636155368117180823261582214657133577","152522786700838840282607497742124534101","233213542422841582848525232954417202000","186058667650961738089272590206750830258","202419127031603137944896340762595016808","25844059799284239300476867930245799350","215797161405493493251392069265924154863","152522786700838840282607497742124534101","233213542422841582848525232954417202000","99465073981910099657087014642954942923","139587389095556504927369914146400108122","277813229126750768878184330822365184638"],"threshold":0.9},"id":"CURL-CVE-2026-19931-2867a11c","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"Curl_cpool_init"},"deprecated":false,"digest":{"function_hash":"279867690020618223401092537855876975589","length":295},"id":"CURL-CVE-2026-19931-2a9b04a6"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/url.c","function":"url_match_result"},"deprecated":false,"digest":{"function_hash":"335561084741251210994352246841586998","length":485},"id":"CURL-CVE-2026-19931-2b177c05","signature_type":"Function","signature_version":"v1"},{"target":{"file":"lib/conncache.c","function":"Curl_cpool_nw_changed"},"deprecated":false,"digest":{"function_hash":"31273115425203792914516606248999159056","length":259},"id":"CURL-CVE-2026-19931-30a52fc3","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/curl_share.c","function":"share_destroy"},"deprecated":false,"digest":{"length":672,"function_hash":"201713524929781143701461808834504454351"},"id":"CURL-CVE-2026-19931-30f6e897","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"338391512807618534647876154179393421813","length":482},"id":"CURL-CVE-2026-19931-33b14ff9","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"cshutdn_destroy_oldest"}},{"deprecated":false,"digest":{"function_hash":"145365971844678549430716355397796436185","length":767},"id":"CURL-CVE-2026-19931-390002ba","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/easy.c","function":"curl_easy_reset"}},{"id":"CURL-CVE-2026-19931-397642cf","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"cpool_reap_dead_cb"},"deprecated":false,"digest":{"function_hash":"25162327623838232598697754027501052921","length":315}},{"target":{"file":"lib/curl_share.h"},"deprecated":false,"digest":{"line_hashes":["68073869111057935164164654857324777922","237863815325564941148523556744448601797","235437145153631277612063434221994656797"],"threshold":0.9},"id":"CURL-CVE-2026-19931-3a8aed8b","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c","function":"curl_multi_waitfds"},"deprecated":false,"digest":{"function_hash":"16318708162414623062701218004461658337","length":978},"id":"CURL-CVE-2026-19931-40f44de9"},{"digest":{"function_hash":"234722769135112481945809642158929911739","length":662},"id":"CURL-CVE-2026-19931-4372769f","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"cshutdn_perform"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/url.c","function":"url_find_or_create_conn"},"deprecated":false,"digest":{"function_hash":"121030974802799980335893866174134527085","length":3987},"id":"CURL-CVE-2026-19931-45dda1ad","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"31206951944000808254899234314060548995","length":207},"id":"CURL-CVE-2026-19931-488c5ed7","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"function":"cpool_find_conn","file":"lib/conncache.c"}},{"digest":{"function_hash":"140579436272770990854344505398980827126","length":280},"id":"CURL-CVE-2026-19931-4ff07b1f","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"cpool_get_instance"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"Curl_cpool_check_limits"},"deprecated":false,"digest":{"function_hash":"153207285630557457912291098154604564980","length":1827},"id":"CURL-CVE-2026-19931-55157ed6","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["83684251794030626838913298603162903217","169317731552707903916197030191340053030","268928128746659298463934614482930892129","196301158044671359117069481836284614346"],"threshold":0.9},"id":"CURL-CVE-2026-19931-5efae0d5","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multiif.h"}},{"id":"CURL-CVE-2026-19931-5f05b2f1","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/easy.c","function":"Curl_connect_only_attach"},"deprecated":false,"digest":{"function_hash":"297691929078236024850503990471296473773","length":196}},{"deprecated":false,"digest":{"line_hashes":["226450672005657723691767475974616614360","86259390982675315401053216815571928935","50552645965114957750201927887888015058","314313972615174247733779726480062268642","86264569500639751039008486047341949680"],"threshold":0.9},"id":"CURL-CVE-2026-19931-5fdacf5b","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/getinfo.c"}},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/curl_trc.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["279406017086063224752481101041280545663","155614503139889055358645893248707689709","4640002181313704388375803226651776227","178338055679274198968788094422697701274"]},"id":"CURL-CVE-2026-19931-63363d01","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/getinfo.c","function":"getinfo_offt"},"deprecated":false,"digest":{"function_hash":"38077669357937006461899187774955666870","length":2729},"id":"CURL-CVE-2026-19931-683f055d","signature_type":"Function"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/easy.c","function":"Curl_easy_recv"},"deprecated":false,"digest":{"function_hash":"302660148922889723966474975372272587959","length":297},"id":"CURL-CVE-2026-19931-68d72424","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"cshutdn_wait"},"deprecated":false,"digest":{"length":349,"function_hash":"222211221913625373790458722690281514778"},"id":"CURL-CVE-2026-19931-71aa48c5","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"319853157472302720116448450669560566885","length":2777},"id":"CURL-CVE-2026-19931-756951cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/easy.c","function":"curl_easy_duphandle"}},{"target":{"file":"lib/multi.c","function":"curl_multi_fdset"},"deprecated":false,"digest":{"function_hash":"58992661858235442878517027450013377804","length":1054},"id":"CURL-CVE-2026-19931-7b453172","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"function":"cpool_evict_conn","file":"lib/conncache.c"},"deprecated":false,"digest":{"function_hash":"11174520779422000615374551058846833207","length":217},"id":"CURL-CVE-2026-19931-7ccf12f4","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"105102184252171454669311337342651543435","length":956},"id":"CURL-CVE-2026-19931-7f9ecb46","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"Curl_conn_terminate"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_terminate"},"deprecated":false,"digest":{"function_hash":"187795369433328315543018902644366285721","length":849},"id":"CURL-CVE-2026-19931-8a61a119"},{"id":"CURL-CVE-2026-19931-8e9faee8","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_add"},"deprecated":false,"digest":{"function_hash":"298573606556198476271252914921231408557","length":857}},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/easy.c"},"deprecated":false,"digest":{"line_hashes":["45096577709522554741044055553576391702","213801477890278491666931098768445365972","230961046989813143452795152810976574271","126733757665003548914605570287806382988","279446198075249939911063056220627462449","36544350420903259697646257901539353169","252184956798950429413992276896382572834","33571624819915976074765679333140845608","256365313748798897789905356660031693887","69143683123552867727899447254283237125","30068993107207731118175164858079668037","179999769425858536182440409503215018563","321772171404837515544715732286584919902","246604893230541988524603434113506543416","232356848973072470690374379022800659593","303219701042079634196756691952020775837","321772171404837515544715732286584919902","39801806315223541708654522596940572669","196070202201411914010448362892373933115","205858944107953208640743567008184321522","321772171404837515544715732286584919902","127686397574365816655486929706196562867","210383012479768389445129599525144532342","220310117535512671171653103795617267026"],"threshold":0.9},"id":"CURL-CVE-2026-19931-9383ddce","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/curl_trc.c","function":"trc_print_ids"},"deprecated":false,"digest":{"function_hash":"184195224548436219731870837643283707808","length":454},"id":"CURL-CVE-2026-19931-9e596a98","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["169092082285673526967886106018550487363","261902645338966466473635840569401111806","113776906639490547671392080367584692038","154686831807660707902011796206355127614","176432520626670996237053217731356639515","244856354235404026411087396776803356049","180608574869362882664513228047293316375","40048598217857878809192498578736320118","156808190457107335732796469712383962693","275054365760020368514631071110479297460","294154619785435100103738672960162526480","216646709858833012096298215744734982832","132151551516623839679193043138555263581","197856122819885566871450034586054770331","273324808130273977995925764475067789094","162355930300865956967937710881874374262","197448445390891390445547998193359271345","5073226559292790416192785990573950926","155350304378842052444863589341721101355","41676824205146232830921149107860765923","41960518088896089174856315109520911538","217717937841766823105443227029204841762","279131361929960537799966043814195257848","110225058198278928228743673029152754227","158182575664181720263812274013926219437","144100161500741300287166063519158488615","171223029716232440516076408735978929127","125479108142444169385389079430186172863","54499557490190629070161368745626225920","222394583491294474364188056567461557237","225500180276945403967013282129582960183","330301346097682808178789927731802304352","210906789938481030161646493071114871425","105509594649342350609241210192158076915","235462915155593857598615140149263910021","181212844205213125598211173733205021978","330475429579772405455027103783329433207","154042356457251326466972426505497535501","16274998730099059137149555012165406908","76320981557794471587998306430452574354","6141753740576266983188300507627662532","103446834041367334265445141118857321918","105811421027530222939046228641054722216","252112495462272836941001533982769620877","269351704262144990002989006583366387688","2562557309527560311874473136614594973","94429105828895910596700503072639791825","107781948823017984134250594217590914466","61448123787227860832623649709920093442","266952945385134203832831150130992515559","20077713706254080062826835745587988341","200513877603570237350482847443174017540","107975811329432436724250592412311679574","336791055226382455284953458025718082204","273716377815494505244304274794590854760","253273763122963072992702623348548652208","223981182271809887891724952386240572607","250779825320048591342611048001901516302","332408174199983174461249995398402891296","184987828220603250937125133162974702515","210149952541416344502938343270142746570","112536650709185926366621924404795840843","78389111739908094324997052587129255835","44431271746930541015537157964097086169","228078469797155150017625545994794515000","326317444124315339169734130373585614216","135846760024029063201618213425800041163","104846841741803060955092248750038971849","48826608060614254837335244167799429374","149014524036292697187877512262968759683","230487757980434476300939434184002296683","145536544717649312252981959621084643753","100920888795965662533543142981935103362","206702283252548435180182846220640672438","255375049211361748782630753888070984245","225944920620184455829022368645063194332","267788813916373652317355341569653861486","44838823546742192322010913577665627742","139603276092843652804884133777996963157","187899761031903441231032084150151462213","37523275325752709058574641721232531177","285436830776387127707781664807357366993","329068267875349276845854986038923743678","325067750478110857497028483949929769778","126621411678116843515368997439007403120","29622696241940107349442751801312844908","164010982219514483164798774643808338344","214307227887295066457896543080097001134","16752492255666690854792511761386546309","111074701258335709838211118750360140384","199836841064244237896739458732839083725","273553509165553831664285481812124575821","139279921622122856173977088027652677164","271624942953922952288023461859883734079","104554926474807870658798701513681354094","310915739135449481229037935399468596200","136319413327338032824928311593916394672","165783625887715283937052572734863787231","182386394727166529066207629947013466950","192736483095629116963181323773090577252","204363787275175025385076151548031712959","261395581146384069588361420298636149345","305893311038709797115684103947769995515","118647842009379955260950510206911047147","164653073152720748097557419711417059262","260317838774774298310933173765525133163","90313806368708605703978999703176064604","84468052407959056730773298958012492142","9249504116078896019468521572903890343","224506365674363001534378599606097854109","122426867452073076153743969552435769368","216286922354354358697626485309696176939","78010270109921584116464723020320145353","98302444278677337716748736806478232307","58664534424958152404376154011909335790","284715940137112084346189566741618102708","46057706371451288742278905778364270397","309272449588651652056832333682655132408","322721357881443898052246736487228899851","87034466138945389889198922855654042807","285782845766879772553982183020130925303","162270933909698804261023490072105376792","212241039226804839056763900136061232327","324621448041827653114222506946426590769","120506014972827136775461283131248896610","120383832108383051239734148250025745676","161308205119023812979549368883326359988","282315647993384360025802104036487974198","217787792105594753497633092411198333188","306017239653305111454393290794149334874","272033566655765616142432079945045164477","12131713354136968021108829440006987973","36787785191772336029848559349525232260","56212307856144679333855998039063735080","44177872770979769311570023314299134442","32114222556389673683769674588897571085","278106709546800273436154873170187447415","276003747201006567724834747465633750742","156904065281613124465419801508617613832","54948502073030738818902769005628690015","262086993232508098286388543614001204393","40720454053082243550752502793441406196","118589292452198211974045711904561809954","65613690932994624159518523574106223397","314112665410023099754349456427402271025","129997267049218912464022395560649475805","39581480984009418751828042633528329425","3338592018371270756338626452749618744","204684629682266505979777215086612438312","306686000181126316339510830562305186771","89473824711079661531675070796789547519","301963096150200016378060908987119208341","79039165932639439944456063956527453197","206393041499288695487377870026103764483","183170013194463545779912791698430737846","225193230149487140896288785738006836425","77935872486397087312120924146964523608","248278642304268849710715711040535732367","9008277108853635045197013482517106211","13023112004737040181884782935075237875","303352629655372873974051797213182811915","85909399068571934876389779112879588472","278997094248973524101728134877948651361","20667979445560868655061990077664439791","337447351362234714196244615984583581152","299718073875818807035960923280469240507","233594521737012710404623621610187826119","14503963138382759387652776282881646917","290796700329627423283182803885682220999","260493944146767194324239782854534615781","332894801124436656044726471666850090884","316037412275119849019648812737014833530","165092595682989993562635253775805487447","86521000882683641327539542197643040300","240809938781313573782660812289484380336","245787513210441246985542054480062735306","297682291305178946400800181990716840371","335421644926656899852307820004623303248","279562697518791363891543092489795016143","317992558999394463359950546560486402298","210676007454751443068747696306442903035","337954735753415060831503445554571017550","333738633192097522415377482536911422931","269657303644966573817569453942972353960","325567264666931075824848935433481737319","58514696313350381791414191358258384463","10049872396675248615437808895523684325","190480050985751026235218350397310676989","147617495895612001560774103117175068618","33691447069338408659215745149871032902","79447129784329918008456090908928520580","242231419416748419685997668274031233964","183170013194463545779912791698430737846","49921549946945002733334496380912248279","113763986484462344901848771262375568154","231489206024190507634384528757257507615","307230548400854422513480075808774044980","175008095778889859668147917023900843700","24011304450097664026507916178903513760","59900581088323342337340259825870117164","279704959431688167115519759537288290567","321196273573246183200561076569962346780","144425728075443790210534476001781091905","187571506842397382461522612782219295199","213070959710608426257931474678579214612","287107558793985530417647684634396581285","15727282728610113818490512876213442237","279993636868682370934329562447706143271","176244285763707551081481402523665112759","164599493034887195267995666888790895556","84122751678411901546671948302766598814","338128671116635022408550154571558208170","308549091346253750094109146735184011459","38116419341601097261719097671744438320","73185179274617012637435001757850227909","264687466246660613338352806284344203317","36423670518157445052179447374174325919","150047450662393998831151351499916144407","269080881063554609854537021496616838575","106655428388119356182457225068454828370","205360354822932067054340758100427244312","308522318202278906338249951057091351086","304052271832783881078426548049544266873","212944802116269560133760901867596398410","125755344139142540733369997313652708243","110718389944275627017436358605224271649","271431742251100015537210308061067920989","133196729766410258827722736645325674432","170853217919423885884945068917685032431","193621784251136913528298973138787356327","156613001541612765289437277327743522242","233779901155063997835445798432921558125","7941724047556151745359065721846107048","207865035723352575516791015178890535596","318773977458597372406457504001246902525","294522094195320325864538081652397593258","78619481552343795063971197489459731067","272967508816907501808386699203532781415","335061251048904353619239168892538323191","231625807921454618841788567878611222777","254231098636938775754343251228219776302","195129852285794872158100984711035982071","45869762600193059541610287900208593693","176244285763707551081481402523665112759","56504994785657834557561453780277996072","89054853454608684869301343376287303041","316133184894215667716019548463786516918","238547241622555737540585885486245993424","180339145319417285641790817438429893580","250625371698432870800700650620561592732","250105248517555904328027442181530073071","278668728793704126803774575605159032786","50882120123167727027795464541309007113","2166895858983392957782745050909070494","321131990972030521874845248165281594867","197680892243186320688083527980529604997","156498447477815760743306563550997326215","222747483706938861595994555391369673936","151085664073788164135156696246683486391","14464835348347159070550823294431301490","286322247195715136956970020591716441062","202599630903336399411953371420175814934","71012851233624371657895300090002685367","249591213392944656754067926931585769255","36562519655373217045076017140155799636","85542234862980141748531242678388017577","310543005703730401169422802782223654540","142468336784597677780241299633739851867","119549108160829396675192646392882568212","139040838935606447459378116164512520271","127858558481260511915295231172165150438","314886809985587715867290736612258213498","324033855315485897953233876713538835429","225012357560685996119554018957915557851","46814053889840343263439653363966862578","38062807723434686775243819865863287604","97217132466933224654840386321254690489","230988347807137034150395311315470407478","67543373166406810932547016329833398560","184526633149857755484859304114762635168","332006838295268703541956198114798665056","177933783998628814279859384625987949347","247874110118983102760547889604603981326","176496496945179243942693374764705287988","202360183075279249135833271325646078543","278980332982260290789469600023311208285","138747140423108380461480004758470760277","171601642392627936048652007573951794613","72888397815353205004511609950643594870","182057272455248211348629235637226121689","331297125320739624193730749309326080892","76643515090743510789047719563038000877","191033121706242354724076764783158160697","117649994681603225484265135070725944714","91733607990808087498747268799118988573","251376100916867119145078276641912404360","201870053305832093524989140661896423024","241057995952099866337431057779064589886","106860566582649388664017093903337105799","258584894399747323693142950286115895288","269759836922323491567404516007460161717","260731510092399131276487784589430310290","1333406729026693626145260027818296337","226176865874895966832162542538699990964","26799978191126225456731634214655766260","208727151473038987417180767428743459528","276244648884709235977685792571227234619","330924037529454185989567310318128388030","80067659665980042929044942575379708920","215955386144199036678584237484254859729","115217015632471183034491111356357141319"],"threshold":0.9},"id":"CURL-CVE-2026-19931-a4b1b094","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c"}},{"digest":{"function_hash":"111962475424305373378707381903810855627","length":232},"id":"CURL-CVE-2026-19931-a665d84e","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"Curl_cpool_upkeep"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"conn_upkeep"},"deprecated":false,"digest":{"function_hash":"68057922820498691593943060200483334171","length":435},"id":"CURL-CVE-2026-19931-a6df36f1","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c","function":"multi_wait"},"deprecated":false,"digest":{"function_hash":"148718353333249153953586610011606578778","length":2193},"id":"CURL-CVE-2026-19931-ac0d4fa3","signature_type":"Function"},{"target":{"file":"lib/multi.c","function":"curl_multi_cleanup"},"deprecated":false,"digest":{"function_hash":"162461007935234387230082688324258205982","length":2100},"id":"CURL-CVE-2026-19931-ac5a6ff3","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"target":{"file":"lib/conncache.c","function":"Curl_cpool_conn_now_idle"},"deprecated":false,"digest":{"function_hash":"197804698990486319061413114391818005682","length":816},"id":"CURL-CVE-2026-19931-ac5b09fa","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"deprecated":false,"digest":{"function_hash":"230725820233360788490632666229926266486","length":194},"id":"CURL-CVE-2026-19931-ae79f7e5","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_close_oldest"}},{"digest":{"function_hash":"80984963126342215646330329082017180155","length":601},"id":"CURL-CVE-2026-19931-b0678e28","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"Curl_cpool_destroy"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"174632984562832895979106348337654631355","length":551},"id":"CURL-CVE-2026-19931-b2cc8dff","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"cpool_foreach"}},{"digest":{"function_hash":"172365762716123802850510864165662846221","length":3026},"id":"CURL-CVE-2026-19931-b470b7e3","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"function":"curl_multi_setopt","file":"lib/multi.c"},"deprecated":false},{"target":{"file":"lib/urldata.h"},"deprecated":false,"digest":{"line_hashes":["8021683315941729120368508264715183481","90834726993137759558453432972194842732","236969838669841680529928144339387640224","285745395244170394795034075956881725671","326810100712062289601794118400246684435"],"threshold":0.9},"id":"CURL-CVE-2026-19931-b4f82b0f","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/url.c"},"deprecated":false,"digest":{"line_hashes":["58509227088366818558917001239278458646","227050504101572022983506909275107827463","181671083724449676651202027146246671241","32632658927842575620661618268455730877","84323995121114156270088985432079295790","85980271551361003612972557219664713835","178131526664399837224414863197878975201","294088560948144569271168854804478094037","219839815826017763155060940558911634235","83403025742493267362242309076998646909","39444027869613253159242115616907021376","201113582606306039526878008996976306132","244741382315862805338708119132894962262","112086770680726670268108176039080190201","284520028856407306924785086349904756804","339823380997258045286123613171993587725","148518809927419336980870669652239003041","284989698198025727159675980238812289164","200051067245907139422445381224427298971","172800355990527449790866683967126340041","100590650773247364370997951741856548837","315390720270525632769900508308638807806","172862595073481533872288841919582977238","289701585525732312983321189786846659653","297397985498644184104841503011901137644","310290662758150729271483762206260243668","52742456976730588553123172048550221035","296857963953228007045301952318209434349","139979809250682799503198568310998060157","235008367865459726958169997560164228090","131806268157926593667340639783568899494","135758030657075537591879876333973949983","127065904873814858523885660331948942406","254198021369081122245933809065958949828","329517133609066755879484736548307824904","317067430260780677309449475753230280891","22776157420050463950653447208403790976","191747346736113228450295520243504873507","160002732775921113908853369898769000248","239720427806115032169089255861402833757","54765466075663482208446878858716571760","71141848908240105591171175104341203498","31891190945315250917264419624049131711","105772742299281720255775097992133500407"],"threshold":0.9},"id":"CURL-CVE-2026-19931-b82dd651","signature_type":"Line"},{"target":{"file":"lib/url.c","function":"url_attach_existing"},"deprecated":false,"digest":{"function_hash":"10510757878310005398892339784180236339","length":1373},"id":"CURL-CVE-2026-19931-c2db20a5","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.h"},"deprecated":false,"digest":{"line_hashes":["43612454721223050442204097925260263197","313966200512366229348632376432031018975","337140449350979708307854597047269666297","115237977554390651715762324178135795539","139272135385087802980973082576803216942","68951038173696606226755568543493446113","179249891976927297179894964862163813809","231587537187697784574308856466314292684","190779926341137313826512423952820121474","303224268837438941182312954955032815681","34195055742702091298989595561155697391","209199950790814395407829183076355656743","187976861834630347236604603850978810250","195333710117072702732586437245683737681","295247699504562611615240863636826285720","16527594965916248117321674684236662009","3837090513773466193283140375110898215","82577740376170382483815274873705718319","147834268498683551668484955196882663134","72241915182878218306047952761527697265","185977128278886191875735797369846643038","265357451770648926129725349390099316256","103473624659238097303807166536122672902","266610932599047967176527597670532197925","245878983057661019435910022921402445985","230577316611876258688503169819005021973","212232349086841551845051093669630312223","130099411855208611800725771529653928001","61405189459978237341939063631714458812","42562699095273621883134615825679166692","201211309528575793306858298789897427996","39373741451829090295705434531345686498","177400662833958056716383515193330006434"],"threshold":0.9},"id":"CURL-CVE-2026-19931-c4ed3160"},{"deprecated":false,"digest":{"function_hash":"116442511713707154469337772983284702519","length":162},"id":"CURL-CVE-2026-19931-c583e013","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_count"}},{"target":{"function":"cpool_mark_stale","file":"lib/conncache.c"},"deprecated":false,"digest":{"function_hash":"129092582076675017471535149108437684223","length":156},"id":"CURL-CVE-2026-19931-ca89a042","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"deprecated":false,"digest":{"function_hash":"181795341082242302890532780420717298613","length":2762},"id":"CURL-CVE-2026-19931-cfcb6975","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/curl_share.c","function":"curl_share_setopt"}},{"digest":{"length":212,"function_hash":"228488844391956592454906767453158699487"},"id":"CURL-CVE-2026-19931-d0244b97","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"cpool_reap_no_reuse"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_perform"},"deprecated":false,"digest":{"length":105,"function_hash":"319350390634592975019109321056430041146"},"id":"CURL-CVE-2026-19931-d179e585"},{"digest":{"function_hash":"16237109168856025225638788536984364191","length":466},"id":"CURL-CVE-2026-19931-d2318005","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_destroy"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/url.h"},"deprecated":false,"digest":{"line_hashes":["43896561523657245767497498809952385869","265340761016822610296963572558270940855","220688413061669323203476422318214824329"],"threshold":0.9},"id":"CURL-CVE-2026-19931-d25f09bf"},{"target":{"function":"cshutdn_terminate_all","file":"lib/cshutdn.c"},"deprecated":false,"digest":{"function_hash":"83476025725740496928504822113933989669","length":1050},"id":"CURL-CVE-2026-19931-d5fc25ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"digest":{"function_hash":"281548972958313753179950993226319278644","length":447},"id":"CURL-CVE-2026-19931-d749d1a2","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"Curl_cpool_prune_dead"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"241893268902688237281444791242632818484","length":251},"id":"CURL-CVE-2026-19931-d7843c9c","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_run_once"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"function":"Curl_cpool_conn_seems_healthy","file":"lib/conncache.c"},"deprecated":false,"digest":{"function_hash":"215091212329922675664750155088346063289","length":832},"id":"CURL-CVE-2026-19931-d965978b"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/curl_share.c","function":"Curl_share_lock"},"deprecated":false,"digest":{"length":302,"function_hash":"97628457642976834940801351221140050644"},"id":"CURL-CVE-2026-19931-e18478d8","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c","function":"Curl_attach_connection"},"deprecated":false,"digest":{"length":536,"function_hash":"313125861612617031991139301530283660341"},"id":"CURL-CVE-2026-19931-e19cd03b","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["191913015560862388580014342052114996591","329654186133677185819860941282919499685","288574862708445857496961599835848582640","128688060564364152621935819621398479222","305966363422131949925383264398033132147","231613063709311463794372438412516450185","300286310382447148368856865743079100920","267706081321340117973092589227239855902","317570532541783399108981109853617021836","97120357005524430168550848814069217589","78041418194906914525612058151136978663","261463502433949725838847750820710940988","242023698258963455031980359794551417263","26553536410175874141244565986856606618","307122432848748398830403413854765467617","301528410414786267026740054519244343047","38835831112959201716683231060770625637","151208457578458483422279463409476831227","271955127364121347272531269238693157574","107179506497217724727661256491587483283","189752951152042423143807957434139299118","28852445975801990104689403382491253863","10996353153333437463398286765202908046","215521122458616768810052506142673141409","213362568208437755613301844642413916762","183415690949158708874649194446046795430","116071484887951002598765180240434315052","144485669786177107284355156652333419476","107078363725465074663478745461286285003","227442207227110373940712521266763343805","254655456810210918905218672564241656235","12598536337899452254009094130084632881","22124948382574728734284191614743055821","97162959881985887027432675698584682355","103285297394034974113710815053816823350","185007464831997003273266949847676589261","277961371901805219695903010253204797897","1632957745894160873043159008726173713","256712691698666614668226858592150624779","156052067830951037117443259777328930818","222657736480253455354360573903915296222","36994425038637353714364927738033730058","77284832897548454331503581649811130780","99153207400461452250212359360448425355","104849413868172900287832525016829630025","43090857571666590792212210277730141962","190462088462328914783838741658157765577","119258988697698457769296765622298402469","269131725433564921121320901916260566558","94783740406177179331567111773043029146","320679305652299346578193684593064996986","109380888975829276606539381078011443300","176364558637162761436801193249818373173","4779345717101085537770989765070041429","104958084119527895301142153441318768090","173040932013611176305158762769071668952","200307464292080875099174185207762389066","16414176481630258398260216290534806553","184868025144948391830592403845581059630","314157909983897901802978673680658643121","335996176393263842153854167765344020619","21445217034353351526158991131265460652","17305082547144903775877492431141525785","12823230607605996758482204513089492511","303118673306619278525417708531550343638","248487887390169795693483294821825131162","192237453169740240706130788836120163489","30540283578623281087394169052989124873","39823623004245538432156265100906685711","242920369132503076129641735791936943186","122880992278859480945615939459348418487","244917259903009551735268523121889734347","268466344102697420293286103458915288905","58603776464546807675086221130822821522","209925680390284837792651361138432629254","77063523416229114048003287396757490670","99845497388892801021083419749435663033","11046910167455390530516622241563028969","59976284860578146791518424414674361282","67469654263426146229792816263229273785","315038468939279111037074749981559809224","123039539179036062751165474043190831689","78311742769268901449094953936906327790","322758713547765873883564511107179461960","264176369215320074960061961023760849145","165004149792726809811373633798851877447","304286824591724867060781853482128874335","140893763624809709824175152383194300716","256377427551535770637971210556890819487","190427733086219098740424344366086573352","193289030576831375534021570231123657195","285354879160332569910296814993233385738","56380027469559531155458655837030115518","212944758661619107769441046000007144557","230954562312572336059639731400108423337","321599701131589254828595759861380182673","328776514140440051554279174446507993269","62133067598015552964091570578296986326","96677826970833293039387287525295459252","303346909759680850505156977994314370747","223812173013643755331593912463676377276","46705870231601446567929267866828256376","61849939563390658938228480450396559311","36318380099881956934294890715440219215","326251267909790017874126836466359876369","42472476681316934228326005482365323015","54956168944163240457618797454153020251","241295003698872910067438781189782800057","243559632674423334578192177667777504267","37860826486569903226375461912486605667","4529601276278316979369243175269626499","149632848106927994279917883898928503121","258915743930794372738475543016847319516","125214189419409063379828193747066329216","177677174979664251556793670866166461882","247772054840455380325938918110516058311","237883332129656814635802708420396314015","238561354134930101498310115917846993031","173128440328196036792197005417666539845","230371442361713205734997663001432042945","302673149438644841500743562432711304937","217142902980244638383961930393831839342","193199326424844098859858036143982127905","92313484936733276739313063695921136534","104297578268841396283389710110557043600","150554457248528239243597934349851139567","328986013681864290479935249329311403192","211249534334235527155874905538800732809","192103911716138122946454307291809176994","275569251828389952998163274140742567485","23187699734882114633960892928337045078","178997446236650147643645913701618281436","47105160381164312984151317663454238306","269881380225362919247016038086586800382","227768393919335988857358508144642329569","177082357066486229395476004177978387371","115533371394850381405389970092296786904","57784532137402360554331106837687635953","115234981969865773772498236103093545171","21738933734654519606040208846356616087","166067673867480188862783064912328095118","293514171935707382184105491352808000519","191001717982113206810230404387002409902","208881279956673022605713494275058008524","89741193187961302091126228237263158214","330850563388591116379534396004449557228","78630182834701362314923262843922730359","293904047836035846475780982738650618195","333586090484533212616974609981847492327","62535385792309950045299734892171664037","142040948485021334280051525248628182032","67280572164229575068173870390124629938","176364558637162761436801193249818373173","258479935077048300599723752455890762324","89657439955101369793390155476691151642","277790100049569011965978344398135840623","27964020747270956123453962580291853331","22188463102610508166153758778523898670","308133293356708154383126249555729820605","66040163421755972757911803633136871008","40877392771301276908370938588858448421","331245585634547208079931148205432070860","70597663591479895190990629560102185775","59449980119763669454626280081192081588","23551054512023365148689899784804539430","68308846465078386098483100895089851713","204912977147720709264670747851304268016","316578866717130194340044239136874495237","191864515072765797271854304756538033881","98307604144855774016634721831476903872","242917752838355461440465636305150391661","9016542832545594022793924188012307226","74498177811014120180542273671668756602","232199513160806366437528912730406881530","28905439663034135229610238774550495407","255319825201310421456771162813882721054","233245527589347581282889666422437099325","211819468698229138946727720522722531922","95779928772365294798425438118553674099","265118948125954607963007469944442324096","27989504034833395409549648005017903805","260610544993114926691168825451375864086","51154006699193868556129722269668398920","179534433209146511981484213251665273371","235917479834038368748085297953492613534","19168992392698122095899417247349591483","76078815285806694134958128168645392862","183379852711077180023082567666673770106","298199760835848986042590412756895146350","246476929681045681554576018606372513405","190467227538532574518280534577701275458","36255956896324419015785439639170242954","316374911097791548596690852505689219267","283957366950778613371065485317195893156","189478830254746713468543780946045199866","18741267986771433413400663315715573405","304895328058269427147334487716618140432","208435705586707761879511630899930717022","325071520719792339330733390081350078589","198486458193021251977333298579485066051","81943653934864925792356692034125176846","114025501518798453235414821672448484527","186834458121094871129450396785443013438","128932262938250325996127729278204820137","305201347225697597596854485722568841469","321692121377425465566972163685179947660","301600683042895947235501459356215334597","73634835512264093543705749961374237463","114007194732865690140605249782381866932","10994091019822816119293521262538155396","254274069686482668030099398844070170425","294696769254139834380505420787941975454","25166925735868054482630392312439883741","205343469325998223225924398973622522092","254926586623789894450602433180808307148","294998999949271402526134984582674099629","72153034822390526285846171351749344359","124666786312117126138790660145545744623","297977639417656569061528140667068684449","268535953983784826770133420732151200267","158412399913321924551132376406719677576","201144510337668976004651188363177012637","53273639915677034531506825767072425495","114007194732865690140605249782381866932","281313393492287539067216271111539284613","44979270356676776049170971848231292397","137259511942079568403213442402900481894","176698088088277979307566581543206353798","774744094238879032593341891748518449","165222228532082788382135476207121878158","169944212426220405006900988739599237192","247735881355492318503444972384556658187","268535953983784826770133420732151200267","199380045960609729144125476772105154735","338298646647039282973743523887469950578","298127245496241693781606895544750567955","157753822344222313011014578991383992334","201144510337668976004651188363177012637","53273639915677034531506825767072425495","114007194732865690140605249782381866932","281313393492287539067216271111539284613","226286585775257838770202573200388578379","62533015525917200357549533823753804525"],"threshold":0.9},"id":"CURL-CVE-2026-19931-e398df95","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/cshutdn.c","function":"Curl_cshutdn_add_pollfds"},"deprecated":false,"digest":{"function_hash":"59799796179828757868123890149160318116","length":561},"id":"CURL-CVE-2026-19931-e82be47c"},{"digest":{"function_hash":"38931748131389868901277831247913022702","length":759},"id":"CURL-CVE-2026-19931-ee0e31a3","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.c","function":"cpool_discard_conn"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"97991427614202972634652090195092496785","length":288},"id":"CURL-CVE-2026-19931-eef964df","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/url.c","function":"url_allow_sspi_empty_creds"}},{"target":{"file":"lib/multi.c","function":"Curl_multi_handle"},"deprecated":false,"digest":{"function_hash":"161126936697478009772096285182598325576","length":3114},"id":"CURL-CVE-2026-19931-f3327e4a","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"},{"id":"CURL-CVE-2026-19931-f3a18336","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/easy.c","function":"Curl_senddata"},"deprecated":false,"digest":{"length":451,"function_hash":"256638881307829554852882731982687302595"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["271061996357585214291181638986699623733","296570902345412221210688129400006789134","26689135858829460899857475051398033941","52721395261073949860417339393675150799","97333781804405947759561785499590898948","56072791251633344340448060633255827384","277015185161559486914512734477259615233","183252238416091248941009284429197313197","57665355224572071865602347182237759529","120902158282922780816517812699703291259","82636515096679387118673962767107535755","159386934361245303445144789030404791882","1240376461074178614219879045495973762","239034365838339751523914215962322277653","35588304015775708791864868394344976248","157811238601282063307013440173007294037","189445263138436988287628205317662592290","196224968929362063191846256087301963591","99315254156444782056890602265843813290","205577706214866398091373516382548614973","212426221747886619508499161185993792551","116356718955624313865579064179710726629","108272683773901177108104997606048778054","34021208612090220949671747249252772729","95115794196035462176261016686833337995","232625819265190217515825576065990400946","56297843440626211365523744769307937082"]},"id":"CURL-CVE-2026-19931-f5725e8a","signature_type":"Line","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/conncache.h"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/multi.c","function":"Curl_multi_add_perform"},"deprecated":false,"digest":{"function_hash":"260528060756395559362292757686017503750","length":356},"id":"CURL-CVE-2026-19931-fdb24648"},{"deprecated":false,"digest":{"function_hash":"299651822121742166813185406345746839796","length":937},"id":"CURL-CVE-2026-19931-fdcea261","signature_type":"Function","signature_version":"v1","source":"https://github.com/curl/curl.git/commit/7103a93b05bc69ea98ed9d05d02fa9eeba533f2f","target":{"file":"lib/url.c","function":"Curl_open"}}]}}],"schema_version":"1.9.0","credits":[{"name":"Martin Dukek","type":"FINDER"},{"name":"Stefan Eissing","type":"REMEDIATION_DEVELOPER"}]}