fix minor nits (#610)

Reported by GitHub Code Quality

Author: vszakats

_download.html

@@ -102,7 +102,7 @@
        </tr>
      <tr><td><b>source</b> </td>
        <td> curl and libcurl full source code, possibly adjusted for the particular
-         surrounding the package is made for</td>
+         environment the package is made for</td>
        </tr>
    </table>
 SUBTITLE(Official curl container images)

docs/CVE-2026-8925.md

@@ -14,8 +14,8 @@ the GSASL context *twice* without clearing the pointer in between, making it
 INFO
 ----
 
-This flaw can trigger with protocols using SASL: IMAP, POP3, SMTP and IMAP if
-curl was built to use libgsasl.
+This flaw can trigger with protocols using SASL: IMAP, POP3 and SMTP if curl
+was built to use libgsasl.
 
 We deem it *hard* for an attacker to control or otherwise affect exactly which
 memory the second `free()` call frees, but we cannot rule out that in limited
@@ -55,7 +55,7 @@ RECOMMENDATIONS
 
  B - Apply the patch to your local version
 
- C - Do not use IMAP, POP3, SMTP or IMAP
+ C - Do not use IMAP, POP3 or SMTP
 
 TIMELINE
 --------

docs/Makefile

@@ -24,7 +24,6 @@ CVELIST = \
  CVE-2000-0973.html \
  CVE-2003-1605.html \
  CVE-2005-0490.html \
- CVE-2005-0490.html \
  CVE-2005-3185.html \
  CVE-2005-4077.html \
  CVE-2006-1061.html \
@@ -526,13 +525,13 @@ security-h.html: _security.html seclist-h.gen $(MAINPARTS) $(ADVBOX)
 security-c.html: _security.html seclist-c.gen $(MAINPARTS) $(ADVBOX)
 	fcpp $(FCPP_OPTS) -DSEVERITY=3 -I$(ROOT) -WWW -Uunix -P -H -C -V -LL $< $@
 
-seclist.gen: vuln.pm listvulns.pl vuln.pm $(CVELIST)
+seclist.gen: listvulns.pl vuln.pm $(CVELIST)
 	./listvulns.pl low > seclist.gen
-seclist-m.gen: vuln.pm listvulns.pl vuln.pm $(CVELIST)
+seclist-m.gen: listvulns.pl vuln.pm $(CVELIST)
 	./listvulns.pl medium > seclist-m.gen
-seclist-h.gen: vuln.pm listvulns.pl vuln.pm $(CVELIST)
+seclist-h.gen: listvulns.pl vuln.pm $(CVELIST)
 	./listvulns.pl high > seclist-h.gen
-seclist-c.gen: vuln.pm listvulns.pl vuln.pm $(CVELIST)
+seclist-c.gen: listvulns.pl vuln.pm $(CVELIST)
 	./listvulns.pl critical > seclist-c.gen
 
 CVE-2025-11563.html: CVE-2025-11563.md $(MAINPARTS) advisory.t $(ADVBOX) mk-wcurl-adv-template.pl

docs/vuln.pm

@@ -45,7 +45,7 @@
     "CVE-2026-3805.html|8.13.0|8.18.0|use after free in SMB connection reuse|CVE-2026-3805|20260311|20260308|CWE-416: Use After Free|0|SMB|USE_AFTER_FREE|both|medium|https://hackerone.com/reports/3591944",
     "CVE-2026-3784.html|7.7|8.18.0|wrong proxy connection reuse with credentials|CVE-2026-3784|20260311|20260304|CWE-305: Authentication Bypass by Primary Weakness|0|CONNREUSE|-|both|low|https://hackerone.com/reports/3584903",
     "CVE-2026-3783.html|7.33.0|8.18.0|token leak with redirect and netrc|CVE-2026-3783|20260311|20260303|CWE-522: Insufficiently Protected Credentials|0|AUTH|-|both|medium|https://hackerone.com/reports/3583983",
-    "CVE-2026-1965.html|7.10.6|8.18.0|bad reuse of HTTP Negotiate connection|CVE-2026-1965|20260311|20260204|CWE-305: Authentication Bypass by Primary Weakness|-|CONNREUSE|-|both|medium",
+    "CVE-2026-1965.html|7.10.6|8.18.0|bad reuse of HTTP Negotiate connection|CVE-2026-1965|20260311|20260204|CWE-305: Authentication Bypass by Primary Weakness|0|CONNREUSE|-|both|medium",
     "CVE-2025-15224.html|7.58.0|8.17.0|libssh key passphrase bypass without agent set|CVE-2025-15224|20260107|20251228|CWE-287: Improper Authentication|505|SSH|-|both|low|https://hackerone.com/reports/3480925",
     "CVE-2025-15079.html|7.58.0|8.17.0|libssh global known_hosts override|CVE-2025-15079|20260107|20251224|CWE-297: Improper Validation of Certificate with Host Mismatch|505|SSH|-|both|low|https://hackerone.com/reports/3477116",
     "CVE-2025-14819.html|7.87.0|8.17.0|OpenSSL partial chain store policy bypass|CVE-2025-14819|20260107|20251216|CWE-295: Improper Certificate Validation|505|TLS|-|lib|low",

docs/vulntable.pl

@@ -32,7 +32,7 @@ sub head {
         }
         $id =~ s/ //;
         my $num = $#vuln - $v + 2;
-        my $a=sprintf("<a style=\"color: white; text-decoration: none;\" href=\"$id\">%02</a>", $num);
+        my $a=sprintf("<a style=\"color: white; text-decoration: none;\" href=\"$id\">%02d</a>", $num);
         $vhref[$v-1]=$a;
         $vstart[$v-1]=$start;
         $vstop[$v-1]=$stop;