CVE-2026-11586

*** Pendiente de traducción *** By default, curl automatically responds to WebSocket PING frames. Because curl<br /> lacks an upper bound on memory allocation for unacknowledged frames, a<br /> malicious server can exhaust all available memory by flooding curl with rapid,<br /> sequential PING messages.