It is a buffer overflow -- apparently curl module doesn't have the at least 558a65e
See the last commits to the utils module in 4.3:
git log -p modules/utils/
—Reply to this email directly or view it on GitHub.