ALPINE-CVE-2026-87865

ALPINE-CVE-2026-87865

This page contains facts from public vulnerability sources. Check the original advisory before updating.

When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback.

Fix available

Published

2026-10-20T21:17:20.693Z

Updated

2026-10-25T16:30:03.596863907Z

Stack: system

Check your server →