Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-9545 in curl - Patched by Root

Type: withdrawalSources: OSV

Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.23. Multiple fixed versions available.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
28 Oct 2026, 12:33 UTC · Revision 1

Source evidence

CVE-2026-9545 in curl - Patched by Root

core-osv · Original source

Published 11 Aug 2026, 14:25 UTC

Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.23. Multiple fixed versions available.

osv:ROOT-OS-ALPINE-323-CVE-2026-9545

curl

Fixed versions: 8.19.0-r00073, 8.19.0-r00074, 8.19.0-r00077, 8.19.0-r00071, 8.19.0-r00072, 8.19.0-r00075, 8.19.0-r00076

rootio-curl

Fixed versions: 8.19.0-r00073, 8.19.0-r00074, 8.19.0-r00077, 8.19.0-r00071, 8.19.0-r00072, 8.19.0-r00075, 8.19.0-r00076

Complete source record
{
  "id": "a8d218a572ad26b13deda8e7afd0f87e2ceba53851ab9c0b83192876ca65b00b",
  "url": "https://osv.dev/vulnerability/ROOT-OS-ALPINE-323-CVE-2026-9545",
  "method": "structured",
  "payload": {
    "kind": "withdrawal",
    "title": "CVE-2026-9545 in curl - Patched by Root",
    "summary": "Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.23. Multiple fixed versions available.",
    "evidence": "osv:ROOT-OS-ALPINE-323-CVE-2026-9545",
    "products": [
      {
        "name": {
          "value": "curl",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.19.0-r00073",
            "evidence": "/affected/0/ranges"
          },
          {
            "value": "8.19.0-r00074",
            "evidence": "/affected/0/ranges"
          },
          {
            "value": "8.19.0-r00077",
            "evidence": "/affected/0/ranges"
          },
          {
            "value": "8.19.0-r00071",
            "evidence": "/affected/0/ranges"
          },
          {
            "value": "8.19.0-r00072",
            "evidence": "/affected/0/ranges"
          },
          {
            "value": "8.19.0-r00075",
            "evidence": "/affected/0/ranges"
          },
          {
            "value": "8.19.0-r00076",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "rootio-curl",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.19.0-r00073",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "8.19.0-r00074",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "8.19.0-r00077",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "8.19.0-r00071",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "8.19.0-r00072",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "8.19.0-r00075",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "8.19.0-r00076",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "ROOT-OS-ALPINE-323-CVE-2026-9545",
      "aliases": [
        "ROOT-OS-ALPINE-323-CVE-2026-9545"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.19.0-r00073"
                },
                {
                  "fixed": "8.19.0-r00074"
                },
                {
                  "fixed": "8.19.0-r00077"
                },
                {
                  "fixed": "8.19.0-r00071"
                },
                {
                  "fixed": "8.19.0-r00072"
                },
                {
                  "fixed": "8.19.0-r00075"
                },
                {
                  "fixed": "8.19.0-r00076"
                }
              ]
            }
          ],
          "package": {
            "name": "curl",
            "ecosystem": "Root:Alpine:3.23"
          },
          "database_specific": {
            "source": "https://api.root.io/external/osv/ROOT-OS-ALPINE-323-CVE-2026-9545.json",
            "root_patched": true,
            "upstream_version": "8.19.0",
            "all_fixed_versions": [
              "8.19.0-r00073",
              "8.19.0-r00074",
              "8.19.0-r00077",
              "8.19.0-r00071",
              "8.19.0-r00072",
              "8.19.0-r00075",
              "8.19.0-r00076"
            ],
            "root_patch_version": "r00077",
            "total_fixed_versions": 7
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.19.0-r00073"
                },
                {
                  "fixed": "8.19.0-r00074"
                },
                {
                  "fixed": "8.19.0-r00077"
                },
                {
                  "fixed": "8.19.0-r00071"
                },
                {
                  "fixed": "8.19.0-r00072"
                },
                {
                  "fixed": "8.19.0-r00075"
                },
                {
                  "fixed": "8.19.0-r00076"
                }
              ]
            }
          ],
          "package": {
            "name": "rootio-curl",
            "ecosystem": "Root:Alpine:3.23"
          },
          "database_specific": {
            "source": "https://api.root.io/external/osv/ROOT-OS-ALPINE-323-CVE-2026-9545.json",
            "root_patched": true,
            "upstream_version": "8.19.0",
            "all_fixed_versions": [
              "8.19.0-r00073",
              "8.19.0-r00074",
              "8.19.0-r00077",
              "8.19.0-r00071",
              "8.19.0-r00072",
              "8.19.0-r00075",
              "8.19.0-r00076"
            ],
            "root_patch_version": "r00077",
            "total_fixed_versions": 7
          }
        }
      ],
      "modified": "2026-10-09T13:00:05.460222819Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-9545"
      ],
      "references": [],
      "provider_metadata": {
        "distro": "alpine",
        "source": "Root",
        "severity": "HIGH",
        "distro_version": "3.23"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-9545",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/database_specific/severity"
  },
  "source_id": "core-osv",
  "document_id": 120788,
  "published_at": "2026-08-11T14:25:22+00:00"
}