CVE-2026-87865

When libcurl uses libssh2 with a hashed known hosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing key to the CURLOPT SSH KEYFUNCTION callback.