When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.
7.81.0-1ubuntu1.248.5.0-2ubuntu10.98.14.1-2ubuntu1.38.18.0-1ubuntu2.17.32.0-1ubuntu17.33.0-1ubuntu17.34.0-1ubuntu17.35.0-1ubuntu17.35.0-1ubuntu27.35.0-1ubuntu2.17.35.0-1ubuntu2.107.35.0-1ubuntu2.117.35.0-1ubuntu2.127.35.0-1ubuntu2.13+33 more7.43.0-1ubuntu27.45.0-1ubuntu17.46.0-1ubuntu17.47.0-1ubuntu17.47.0-1ubuntu27.47.0-1ubuntu2.17.47.0-1ubuntu2.117.47.0-1ubuntu2.127.47.0-1ubuntu2.137.47.0-1ubuntu2.14+28 more7.55.1-1ubuntu27.55.1-1ubuntu2.17.57.0-1ubuntu17.58.0-2ubuntu17.58.0-2ubuntu27.58.0-2ubuntu37.58.0-2ubuntu3.17.58.0-2ubuntu3.107.58.0-2ubuntu3.127.58.0-2ubuntu3.13+27 more7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu17.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.12+21 moreExploitability
AV:NAC:HPR:LUI:NScope
S:UImpact
C:HI:NA:NCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N