A vulnerability, which was classified as problematic, was found in cURL up to 8.19.0. This affects an unknown function of the component Redirect-to Proxy Handler. Such manipulation leads to information disclosure.

This vulnerability is documented as CVE-2026-6253. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.