[curl] CVE-2023-38039: HTTP header allocation DOS

CVE-2023-38039 HTTP headers eat all memory Project curl Security Advisory, September 13 2023 - Permalink VULNERABILITY When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit on the size or quantity of headers it would accept in a response, allowing a malicious server to stream an endless series of headers to a client and eventually cause curl to run out of heap memory. Full Security Advisory: https://curl.se/docs/CVE-2023-38039.html