connection reuse mitigation

The connection reuse mitigation tag covers a curl/libcurl security issue involving HTTP Negotiate/SPNEGO authentication, multiple credentials, and long-lived reusable connections to the same host. The featured guidance addresses CVE-2026-1965, which affects curl/libcurl versions 7.10.6 through 8.18.0, and recommends upgrading to version 8.19.0. It also documents temporary ways to restrict the risky reuse path, including CURLOPT_FRESH_CONNECT, lower CURLOPT_MAXCONNECTS limits, and per-host limits with CURLMOPT_MAX_HOST_CONNECTIONS when using the multi interface. These settings can change connection behavior and reduce performance, so the tag focuses on mitigation options while emphasizing that upgrading is the preferred fix for affected applications.