negotiate authentication

libcurl's Negotiate authentication code has a logic flaw that can cause a request to reuse a connection authenticated for a different user, exposing authenticated sessions to wrong-identity reuse and credential confusion — a vulnerability tracked as CVE-2026-1965 that was disclosed and fixed by...