diff --git a/tools/apitester/__snapshots__/cassette_single_query.snap b/tools/apitester/__snapshots__/cassette_single_query.snap index 7048171f700..a77df5cdc70 100755 --- a/tools/apitester/__snapshots__/cassette_single_query.snap +++ b/tools/apitester/__snapshots__/cassette_single_query.snap @@ -3637,6 +3637,74 @@ } ] }, + { + "id": "CVE-2026-13608", + "summary": "OpenLDAP SASL authentication bypass", + "details": "A flaw in the libcurl SASL negotiation for LDAP authentication allows an\nincomplete handshake sequence to be misinterpreted as a successful\ncryptographic verification. An attacker executing a Man-in-the-Middle (MITM)\nattack can inject a premature or shortcut response that bypasses complete peer\nvalidation.", + "aliases": ["CURL-CVE-2026-13608"], + "modified": "", + "published": "2026-09-06T17:47:01.951Z", + "related": [ + "SUSE-SU-2026:23498-1", + "SUSE-SU-2026:3958-1", + "SUSE-SU-2026:4047-1", + "SUSE-SU-2026:4048-1", + "SUSE-SU-2026:4071-1", + "openSUSE-SU-2026:11696-1", + "openSUSE-SU-2026:21774-1" + ], + "database_specific": "", + "references": [ + { + "type": "WEB", + "url": "https://curl.se/docs/CVE-2026-13608.html" + }, + { + "type": "WEB", + "url": "https://curl.se/docs/CVE-2026-13608.json" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/3822248" + }, + { + "type": "ADVISORY", + "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13608.json" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13608" + } + ], + "affected": [ + { + "ranges": [ + { + "type": "GIT", + "repo": "https://github.com/curl/curl", + "events": [ + { + "introduced": "64db5c575d9c5536bd273a890f50777ad1ca7c13" + }, + { + "fixed": "01346829096c61b372692f6dc43ffa778c6caccd" + } + ], + "database_specific": "" + } + ], + "versions": 50, + "database_specific": "" + } + ], + "schema_version": "1.9.0", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ] + }, { "id": "CVE-2026-1965", "summary": "bad reuse of HTTP Negotiate connection",