Unicode-to-ASCII conversion on Windows can lead to argument injection and more

I am splitline from DEVCORE Research Team. We recently found a vulnerability on cURL. We have reproduced the issues in the latest version of cURL (curl-8.8.0_1) and would like to report it to you. Please check the attached document for details.

powershell.exe [Console]::OutputEncoding.WindowsCodePage