Security Advisory
CVE-2026-8925
9.8
CRITICAL
Vulnerability Description
The curl logic that works with SASL authentication could end up cleaning up
the GSASL context *twice* without clearing the pointer in between, making it
`free()` the same pointer twice.
Published Date
July 3, 2026
Official Source
NIST NVD Advisory