{"id":"CVE-2023-46219","revision":"22f37a8e7a894d2b866494c82a94e866","records":[{"revision":"22f37a8e7a894d2b866494c82a94e866","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-46219","aliases":[],"title":"When saving HSTS data to an excessively long file name, curl could end up","description":"When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.","state":0,"publishedAt":"2023-12-12T01:38:41.376+00:00","modifiedAt":"2026-10-15T00:04:51.589+00:00","affected":[{"ecosystem":"Vendor product","name":"curl","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"curl\",\n                    \"product\": \"curl\",\n                    \"versions\": [\n                        {\n                            \"version\": \"8.4.0\",\n                            \"status\": \"affected\",\n                            \"lessThanOrEqual\": \"8.4.0\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.84.0\",\n                            \"status\": \"unaffected\",\n                            \"lessThan\": \"7.84.0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://hackerone.com/reports/2236133","https://curl.se/docs/CVE-2023-46219.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://www.debian.org/security/2023/dsa-5587","https://security.netapp.com/advisory/ntap-20240119-0007/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-46219","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-46219","identifiers":["CVE-2023-46219"]},"retained":false,"historicalAffected":[]}],"coverage":[]}