{
  "artifact_sha256": {
    "repro/fixed-attempt-1.log": "5867e4619f9fc389081e83408d0c8b7a0e2ab7b8b4641903609783ff27f61cd4",
    "repro/fixed-attempt-2.log": "b3ad9c3c3f8cc06e4bcec970d10518ed3eb83ffe5555a4c5e4e26fd671562cdd",
    "repro/fixed-server-1.log": "c8b87a1464d3633d5b3bb89b18cc81fb496848f52a4dfc9f9c433282180fd56b",
    "repro/fixed-server-2.log": "4d1d05f381ece0257c6db276c5e9d3c34ebc1d7fe4b4508728dd6a3ec8b8a4b2",
    "repro/target-identity.log": "56f5b819c0ae9fa0c0171f277b96d3d856205e9bd7aa30ca13900bf0dc663983",
    "repro/vulnerable-attempt-1.log": "2cd27376a1b49f95aa8289285ae9dd5ec910b814f25bab2e2b1e32d0f9eccc14",
    "repro/vulnerable-attempt-2.log": "6c93752016b1c79db901396b3ad9a4619b9300b48ffd8e0f9c12b67fbd7cd6eb",
    "repro/vulnerable-server-1.log": "40040e32c663a883379f87116e0cfb0537eb2d6d38f08c1bf6a54959a747d451",
    "repro/vulnerable-server-2.log": "a78393083327d35e911f9ba1b5431d8d0f714647573a86610bae2c6ad32bd52e"
  },
  "entrypoint_detail": "Real HTTP Set-Cookie response at github.io followed by a request to attacker.github.io using curl --resolve",
  "entrypoint_kind": "endpoint",
  "healthcheck_passed": true,
  "notes": "Two vulnerable attempts leaked DOMAIN_SECRET to the sibling; two attempts at fixed commit 95c1e8915dce64606bd753fd47fc0bd236e31cd6 withheld it while retaining it for the exact origin. No sanitizer was used.",
  "proof_artifacts": [
    "repro/vulnerable-attempt-1.log",
    "repro/vulnerable-server-1.log",
    "repro/vulnerable-attempt-2.log",
    "repro/vulnerable-server-2.log",
    "repro/fixed-attempt-1.log",
    "repro/fixed-server-1.log",
    "repro/fixed-attempt-2.log",
    "repro/fixed-server-2.log",
    "repro/target-identity.log"
  ],
  "runtime_stack": [
    "curl CLI",
    "libcurl cookie engine",
    "libpsl",
    "Python local HTTP endpoint"
  ],
  "service_started": true,
  "target_identity": {
    "architecture": "x86_64",
    "commit_sha": "f8992b6a177a2ccfb5dc04137088534bad68681c",
    "platform": "linux",
    "repository_url": "https://github.com/curl/curl",
    "target_digest": "e677ed09f427dd41bac4cb6f8de6e53aa64d3e05fafd927d2d839caf380ed643"
  },
  "target_path_reached": true
}