[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-6874":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T23:19:30.300Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":33,"duplicate_of":9,"upstream":34,"downstream":35,"duplicates":44,"related":45,"reserved_at":9,"published_at":48,"modified_at":49,"state":50,"summary":51,"references_raw":59,"kevs":86,"epss":87,"epss_history":90,"metrics":351,"affected":363},"CVE-2024-6874","libcurl's URL API function\n[curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode\nconversions, to and from IDN. Asking to convert a name that is exactly 256\nbytes, libcurl ends up reading outside of a stack based buffer when built to\nuse the *macidn* IDN backend. The conversion function then fills up the\nprovided buffer exactly - but does not null terminate the string.\n\nThis flaw can lead to stack contents accidently getting returned as part of\nthe converted string.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[24],{"_key":25,"name":26,"source":27,"url":28,"maturity":29,"reliability_score":30,"verified":31,"type":9,"platforms":32,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_62F9FCC4F18459FF","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/2604391","unknown",0.2,false,[],[],[],[36,38,40,42],{"_key":37},"OPENSUSE-SU-2024:14225-1",{"_key":39},"SUSE-SU-2025:03198-1",{"_key":41},"ALPINE-CVE-2024-6874",{"_key":43},"DEBIAN-CVE-2024-6874",[],[46,47],{"_key":37},{"_key":39},"2024-07-24T07:36:26.887Z","2025-02-13T17:58:00.151Z","Modified",{"cisa_kev":31,"cisa_ransomware":31,"cisa_vendor":9,"epss_severity":52,"epss_score":53,"severity":54,"severity_score":55,"severity_version":56,"severity_source":57,"severity_vector":58,"severity_status":50},"low",0.00786,"medium",4.3,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",[60,66,70,76,82],{"url":61,"sources":62,"tags":64},"https://curl.se/docs/CVE-2024-6874.json",[63,57],"cve.org",[65],"Vendor Advisory",{"url":67,"sources":68,"tags":69},"https://curl.se/docs/CVE-2024-6874.html",[63,57],[65],{"url":28,"sources":71,"tags":72},[63,57],[73,74,75],"Exploit","Issue Tracking","Technical Description",{"url":77,"sources":78,"tags":79},"http://www.openwall.com/lists/oss-security/2024/07/24/2",[63,57],[80,81],"Mailing List","Third Party Advisory",{"url":83,"sources":84,"tags":85},"https://security.netapp.com/advisory/ntap-20240822-0004/",[63,57],[],[],{"date":88,"score":53,"percentile":89},"2026-07-06",0.51693,[91,95,98,101,104,107,110,113,116,118,121,124,126,129,132,136,139,142,145,148,150,153,156,158,160,163,165,167,171,174,177,180,183,185,188,191,194,197,200,203,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,254,257,260,264,267,270,273,276,279,282,285,288,291,294,297,299,302,305,308,310,313,316,318,321,324,327,330,333,336,338,341,344,346,349],{"date":92,"score":93,"percentile":94},"2025-11-04",0.00731,0.71916,{"date":96,"score":93,"percentile":97},"2025-11-05",0.719,{"date":99,"score":93,"percentile":100},"2025-11-06",0.71897,{"date":102,"score":93,"percentile":103},"2025-11-07",0.71911,{"date":105,"score":93,"percentile":106},"2025-11-08",0.71909,{"date":108,"score":93,"percentile":109},"2025-11-09",0.71903,{"date":111,"score":93,"percentile":112},"2025-11-10",0.71891,{"date":114,"score":93,"percentile":115},"2025-11-11",0.71898,{"date":117,"score":93,"percentile":94},"2025-11-12",{"date":119,"score":93,"percentile":120},"2025-11-13",0.71923,{"date":122,"score":93,"percentile":123},"2025-11-14",0.7193,{"date":125,"score":93,"percentile":123},"2025-11-15",{"date":127,"score":93,"percentile":128},"2025-11-16",0.71927,{"date":130,"score":93,"percentile":131},"2025-11-17",0.7192,{"date":133,"score":134,"percentile":135},"2025-11-18",0.00367,0.55835,{"date":137,"score":134,"percentile":138},"2025-11-19",0.5585,{"date":140,"score":134,"percentile":141},"2025-11-20",0.55841,{"date":143,"score":93,"percentile":144},"2025-11-21",0.71946,{"date":146,"score":93,"percentile":147},"2025-11-22",0.7194,{"date":149,"score":93,"percentile":120},"2025-11-23",{"date":151,"score":93,"percentile":152},"2025-11-24",0.71914,{"date":154,"score":93,"percentile":155},"2025-11-25",0.71917,{"date":157,"score":93,"percentile":120},"2025-11-26",{"date":159,"score":93,"percentile":120},"2025-11-27",{"date":161,"score":93,"percentile":162},"2025-11-28",0.71912,{"date":164,"score":93,"percentile":109},"2025-11-29",{"date":166,"score":93,"percentile":115},"2025-11-30",{"date":168,"score":169,"percentile":170},"2025-12-01",0.00296,0.52568,{"date":172,"score":169,"percentile":173},"2025-12-02",0.52585,{"date":175,"score":169,"percentile":176},"2025-12-03",0.52583,{"date":178,"score":93,"percentile":179},"2025-12-04",0.71904,{"date":181,"score":93,"percentile":182},"2025-12-05",0.71915,{"date":184,"score":93,"percentile":155},"2025-12-06",{"date":186,"score":93,"percentile":187},"2025-12-07",0.71921,{"date":189,"score":93,"percentile":190},"2025-12-08",0.71924,{"date":192,"score":93,"percentile":193},"2025-12-09",0.71958,{"date":195,"score":93,"percentile":196},"2025-12-10",0.71995,{"date":198,"score":93,"percentile":199},"2025-12-11",0.72015,{"date":201,"score":93,"percentile":202},"2025-12-12",0.7204,{"date":204,"score":205,"percentile":206},"2025-12-13",0.0099,0.76287,{"date":208,"score":205,"percentile":209},"2025-12-14",0.76283,{"date":211,"score":205,"percentile":212},"2025-12-15",0.7628,{"date":214,"score":205,"percentile":215},"2025-12-16",0.76292,{"date":217,"score":205,"percentile":218},"2025-12-17",0.76305,{"date":220,"score":205,"percentile":221},"2025-12-18",0.7632,{"date":223,"score":205,"percentile":224},"2025-12-19",0.76334,{"date":226,"score":205,"percentile":227},"2025-12-20",0.76326,{"date":229,"score":205,"percentile":230},"2025-12-21",0.76321,{"date":232,"score":205,"percentile":233},"2025-12-22",0.76315,{"date":235,"score":205,"percentile":236},"2025-12-23",0.76314,{"date":238,"score":205,"percentile":239},"2025-12-24",0.76324,{"date":241,"score":205,"percentile":242},"2025-12-25",0.76345,{"date":244,"score":205,"percentile":245},"2025-12-26",0.76343,{"date":247,"score":205,"percentile":248},"2025-12-27",0.76396,{"date":250,"score":205,"percentile":251},"2025-12-28",0.76325,{"date":253,"score":205,"percentile":230},"2025-12-29",{"date":255,"score":205,"percentile":256},"2025-12-30",0.76331,{"date":258,"score":205,"percentile":259},"2025-12-31",0.76351,{"date":261,"score":262,"percentile":263},"2026-01-01",0.00402,0.60442,{"date":265,"score":262,"percentile":266},"2026-01-02",0.60428,{"date":268,"score":262,"percentile":269},"2026-01-03",0.60426,{"date":271,"score":205,"percentile":272},"2026-01-04",0.7636,{"date":274,"score":205,"percentile":275},"2026-01-05",0.76352,{"date":277,"score":205,"percentile":278},"2026-01-06",0.76362,{"date":280,"score":205,"percentile":281},"2026-01-07",0.76372,{"date":283,"score":205,"percentile":284},"2026-01-08",0.76381,{"date":286,"score":205,"percentile":287},"2026-01-09",0.76391,{"date":289,"score":205,"percentile":290},"2026-01-10",0.7639,{"date":292,"score":205,"percentile":293},"2026-01-11",0.76378,{"date":295,"score":205,"percentile":296},"2026-01-12",0.76367,{"date":298,"score":205,"percentile":296},"2026-01-13",{"date":300,"score":205,"percentile":301},"2026-01-14",0.76393,{"date":303,"score":205,"percentile":304},"2026-01-15",0.76399,{"date":306,"score":205,"percentile":307},"2026-01-16",0.7641,{"date":309,"score":205,"percentile":307},"2026-01-17",{"date":311,"score":205,"percentile":312},"2026-01-18",0.76402,{"date":314,"score":205,"percentile":315},"2026-01-19",0.76397,{"date":317,"score":205,"percentile":315},"2026-01-20",{"date":319,"score":205,"percentile":320},"2026-01-21",0.76403,{"date":322,"score":205,"percentile":323},"2026-01-22",0.76409,{"date":325,"score":205,"percentile":326},"2026-01-23",0.76438,{"date":328,"score":205,"percentile":329},"2026-01-24",0.7645,{"date":331,"score":205,"percentile":332},"2026-01-25",0.76437,{"date":334,"score":205,"percentile":335},"2026-01-26",0.76436,{"date":337,"score":205,"percentile":326},"2026-01-27",{"date":339,"score":205,"percentile":340},"2026-01-28",0.76447,{"date":342,"score":205,"percentile":343},"2026-01-29",0.76442,{"date":345,"score":205,"percentile":340},"2026-01-30",{"date":347,"score":205,"percentile":348},"2026-01-31",0.76445,{"date":350,"score":262,"percentile":269},"2026-02-01",[352,359],{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":353,"cvss_v4_0":9},{"baseScore":354,"baseSeverity":355,"vectorString":356,"impactScore":357,"exploitabilityScore":358},3.1,"LOW","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",2.3,4.1,{"source":57,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":360,"cvss_v4_0":9},{"baseScore":55,"baseSeverity":361,"vectorString":58,"impactScore":357,"exploitabilityScore":362},"MEDIUM",7.2,[364,373],{"ecosystem":9,"name":365,"vendor":365,"product":365,"cpe_part":366,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":367},"curl","a",[368],{"version":369,"is_range":370,"range_type":63,"version_start":371,"version_start_type":372,"version_end":371,"version_end_type":372,"fixed_in":9},">= 8.8.0, \u003C= 8.8.0",true,"8.8.0","including",{"ecosystem":9,"name":374,"vendor":375,"product":374,"cpe_part":366,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":376},"libcurl","haxx",[377],{"version":371,"is_range":31,"range_type":378,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"cpe"]