spnego negotiate

The spnego negotiate tag covers guidance on HTTP Negotiate/SPNEGO authentication in curl and libcurl, with a current focus on CVE-2026-1965. The issue affects curl/libcurl versions 7.10.6 through 8.18.0 when applications reuse long-lived connections to the same host with multiple credentials. The recommended response is upgrading to curl/libcurl 8.19.0. Content under this tag also describes interim controls, including forcing fresh connections with CURLOPT_FRESH_CONNECT, limiting connection-cache size with CURLOPT_MAXCONNECTS, and setting per-host limits through CURLMOPT_MAX_HOST_CONNECTIONS in the multi interface. These measures alter connection behavior and may reduce performance, so they are presented as temporary mitigations rather than replacements for patching.