Threats tagged 'ghsa-g337-g667-mjvw'

A vulnerability in curl's handling of HSTS cache expiry times can cause the expiry time for a subdomain to overwrite the parent domain's cache entry. This leads to incorrect enforcement durations of HTTPS redirection for the parent domain, potentially causing curl to either prematurely revert to HTTP or continue HTTPS access beyond the intended expiry. The issue occurs when curl uses HSTS with URLs involving both a parent domain and its subdomain, and the HSTS cache has been populated from prior HTTPS accesses or manual entries.