[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-10148":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":52,"related":53,"reserved_at":9,"published_at":64,"modified_at":65,"state":66,"summary":67,"references_raw":76,"kevs":107,"epss":108,"epss_history":111,"metrics":384,"affected":392},"CVE-2025-10148","curl's websocket code did not update the 32 bit mask pattern for each new\n outgoing frame as the specification says. Instead it used a fixed mask that\npersisted and was used throughout the entire connection.\n\nA predictable mask pattern allows for a malicious server to induce traffic\nbetween the two communicating parties that could be interpreted by an involved\nproxy (configured or transparent) as genuine, real, HTTP traffic with content\nand thereby poison its cache. That cached poisoned content could then be\nserved to all users of that proxy.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50],{"_key":23},"SUSE-SU-2025:03267-1",{"_key":25},"SUSE-SU-2025:03268-1",{"_key":27},"SUSE-SU-2025:03173-1",{"_key":29},"SUSE-SU-2025:20802-1",{"_key":31},"SUSE-SU-2025:20824-1",{"_key":33},"SUSE-SU-2025:21077-1",{"_key":35},"SUSE-SU-2025:21145-1",{"_key":37},"SUSE-SU-2025:03198-1",{"_key":39},"OPENSUSE-SU-2025:15590-1",{"_key":41},"OPENSUSE-SU-2025:20090-1",{"_key":43},"UBUNTU-CVE-2025-10148",{"_key":45},"USN-8062-1",{"_key":47},"ALPINE-CVE-2025-10148",{"_key":49},"RHSA-2026:6893",{"_key":51},"DEBIAN-CVE-2025-10148",[],[54,55,56,57,58,59,60,61,62,63],{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},"2025-09-12T05:10:37.469Z","2025-11-18T20:05:32.822Z","Analyzed",{"cisa_kev":68,"cisa_ransomware":68,"cisa_vendor":9,"epss_severity":69,"epss_score":70,"severity":71,"severity_score":72,"severity_version":73,"severity_source":74,"severity_vector":75,"severity_status":66},false,"low",0.00466,"medium",5.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",[77,83,88,94,99,103],{"url":78,"sources":79,"tags":81},"https://curl.se/docs/CVE-2025-10148.json",[74,80],"nvd",[82],"Vendor Advisory",{"url":84,"sources":85,"tags":86},"https://curl.se/docs/CVE-2025-10148.html",[74,80],[82,87],"Patch",{"url":89,"sources":90,"tags":91},"https://hackerone.com/reports/3330839",[74,80],[92,93],"Issue Tracking","Third Party Advisory",{"url":95,"sources":96,"tags":97},"http://www.openwall.com/lists/oss-security/2025/09/10/2",[74,80],[98,93,87],"Mailing List",{"url":100,"sources":101,"tags":102},"http://www.openwall.com/lists/oss-security/2025/09/10/3",[74,80],[98,93],{"url":104,"sources":105,"tags":106},"http://www.openwall.com/lists/oss-security/2025/09/10/4",[74,80],[98,93],[],{"date":109,"score":70,"percentile":110},"2026-07-05",0.37076,[112,116,120,123,126,129,132,135,138,140,143,146,148,151,154,157,161,164,168,171,174,177,180,183,186,189,192,195,199,202,205,208,211,214,217,220,223,226,229,232,235,238,240,243,246,249,252,255,258,261,264,267,270,273,275,278,281,284,287,290,293,296,299,302,305,308,311,313,316,319,323,326,329,332,335,338,341,344,347,351,354,357,360,363,366,369,372,375,378,380],{"date":113,"score":114,"percentile":115},"2025-11-04",0.00036,0.09791,{"date":117,"score":118,"percentile":119},"2025-11-05",0.00037,0.10377,{"date":121,"score":118,"percentile":122},"2025-11-06",0.10489,{"date":124,"score":118,"percentile":125},"2025-11-07",0.10514,{"date":127,"score":118,"percentile":128},"2025-11-08",0.10518,{"date":130,"score":118,"percentile":131},"2025-11-09",0.10482,{"date":133,"score":118,"percentile":134},"2025-11-10",0.10445,{"date":136,"score":118,"percentile":137},"2025-11-11",0.10458,{"date":139,"score":118,"percentile":122},"2025-11-12",{"date":141,"score":118,"percentile":142},"2025-11-13",0.10527,{"date":144,"score":118,"percentile":145},"2025-11-14",0.10533,{"date":147,"score":118,"percentile":142},"2025-11-15",{"date":149,"score":118,"percentile":150},"2025-11-16",0.10526,{"date":152,"score":118,"percentile":153},"2025-11-17",0.10508,{"date":155,"score":118,"percentile":156},"2025-11-18",0.06481,{"date":158,"score":159,"percentile":160},"2025-11-19",0.00048,0.10267,{"date":162,"score":159,"percentile":163},"2025-11-20",0.10291,{"date":165,"score":166,"percentile":167},"2025-11-21",0.0007,0.2151,{"date":169,"score":166,"percentile":170},"2025-11-22",0.21504,{"date":172,"score":166,"percentile":173},"2025-11-23",0.21468,{"date":175,"score":166,"percentile":176},"2025-11-24",0.21439,{"date":178,"score":166,"percentile":179},"2025-11-25",0.21423,{"date":181,"score":166,"percentile":182},"2025-11-26",0.21412,{"date":184,"score":166,"percentile":185},"2025-11-27",0.21374,{"date":187,"score":166,"percentile":188},"2025-11-28",0.21349,{"date":190,"score":166,"percentile":191},"2025-11-29",0.21335,{"date":193,"score":166,"percentile":194},"2025-11-30",0.21326,{"date":196,"score":197,"percentile":198},"2025-12-01",0.00075,0.22661,{"date":200,"score":197,"percentile":201},"2025-12-02",0.22678,{"date":203,"score":197,"percentile":204},"2025-12-03",0.2269,{"date":206,"score":166,"percentile":207},"2025-12-04",0.21341,{"date":209,"score":166,"percentile":210},"2025-12-05",0.21384,{"date":212,"score":166,"percentile":213},"2025-12-06",0.21385,{"date":215,"score":166,"percentile":216},"2025-12-07",0.21358,{"date":218,"score":166,"percentile":219},"2025-12-08",0.2137,{"date":221,"score":166,"percentile":222},"2025-12-09",0.21421,{"date":224,"score":166,"percentile":225},"2025-12-10",0.21496,{"date":227,"score":166,"percentile":228},"2025-12-11",0.21537,{"date":230,"score":166,"percentile":231},"2025-12-12",0.21551,{"date":233,"score":166,"percentile":234},"2025-12-13",0.21556,{"date":236,"score":166,"percentile":237},"2025-12-14",0.21525,{"date":239,"score":166,"percentile":170},"2025-12-15",{"date":241,"score":166,"percentile":242},"2025-12-16",0.21536,{"date":244,"score":166,"percentile":245},"2025-12-17",0.21611,{"date":247,"score":166,"percentile":248},"2025-12-18",0.21696,{"date":250,"score":166,"percentile":251},"2025-12-19",0.21719,{"date":253,"score":166,"percentile":254},"2025-12-20",0.21697,{"date":256,"score":166,"percentile":257},"2025-12-21",0.21642,{"date":259,"score":166,"percentile":260},"2025-12-22",0.2161,{"date":262,"score":166,"percentile":263},"2025-12-23",0.21606,{"date":265,"score":166,"percentile":266},"2025-12-24",0.21626,{"date":268,"score":166,"percentile":269},"2025-12-25",0.21706,{"date":271,"score":166,"percentile":272},"2025-12-26",0.21689,{"date":274,"score":166,"percentile":254},"2025-12-27",{"date":276,"score":166,"percentile":277},"2025-12-28",0.21651,{"date":279,"score":166,"percentile":280},"2025-12-29",0.21614,{"date":282,"score":166,"percentile":283},"2025-12-30",0.21596,{"date":285,"score":166,"percentile":286},"2025-12-31",0.21655,{"date":288,"score":197,"percentile":289},"2026-01-01",0.2296,{"date":291,"score":197,"percentile":292},"2026-01-02",0.22958,{"date":294,"score":197,"percentile":295},"2026-01-03",0.22941,{"date":297,"score":166,"percentile":298},"2026-01-04",0.21627,{"date":300,"score":166,"percentile":301},"2026-01-05",0.2162,{"date":303,"score":166,"percentile":304},"2026-01-06",0.21635,{"date":306,"score":166,"percentile":307},"2026-01-07",0.2167,{"date":309,"score":166,"percentile":310},"2026-01-08",0.21725,{"date":312,"score":166,"percentile":251},"2026-01-09",{"date":314,"score":166,"percentile":315},"2026-01-10",0.21698,{"date":317,"score":166,"percentile":318},"2026-01-11",0.21667,{"date":320,"score":321,"percentile":322},"2026-01-12",0.00085,0.25108,{"date":324,"score":321,"percentile":325},"2026-01-13",0.25086,{"date":327,"score":321,"percentile":328},"2026-01-14",0.2514,{"date":330,"score":321,"percentile":331},"2026-01-15",0.25129,{"date":333,"score":321,"percentile":334},"2026-01-16",0.25162,{"date":336,"score":321,"percentile":337},"2026-01-17",0.25168,{"date":339,"score":321,"percentile":340},"2026-01-18",0.25144,{"date":342,"score":321,"percentile":343},"2026-01-19",0.25096,{"date":345,"score":321,"percentile":346},"2026-01-20",0.25075,{"date":348,"score":349,"percentile":350},"2026-01-21",0.00095,0.26874,{"date":352,"score":349,"percentile":353},"2026-01-22",0.26853,{"date":355,"score":349,"percentile":356},"2026-01-23",0.26924,{"date":358,"score":349,"percentile":359},"2026-01-24",0.26923,{"date":361,"score":349,"percentile":362},"2026-01-25",0.26845,{"date":364,"score":349,"percentile":365},"2026-01-26",0.2676,{"date":367,"score":349,"percentile":368},"2026-01-27",0.26742,{"date":370,"score":349,"percentile":371},"2026-01-28",0.26734,{"date":373,"score":349,"percentile":374},"2026-01-29",0.2669,{"date":376,"score":349,"percentile":377},"2026-01-30",0.26684,{"date":379,"score":349,"percentile":377},"2026-01-31",{"date":381,"score":382,"percentile":383},"2026-02-01",0.00122,0.31808,[385,390],{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":386,"cvss_v4_0":9},{"baseScore":72,"baseSeverity":387,"vectorString":75,"impactScore":388,"exploitabilityScore":389},"MEDIUM",2.3,10,{"source":80,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":391,"cvss_v4_0":9},{"baseScore":72,"baseSeverity":387,"vectorString":75,"impactScore":388,"exploitabilityScore":389},[393,423],{"ecosystem":9,"name":394,"vendor":394,"product":394,"cpe_part":395,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":396},"curl","a",[397,402,405,408,411,414,417,420],{"version":398,"is_range":399,"range_type":74,"version_start":400,"version_start_type":401,"version_end":400,"version_end_type":401,"fixed_in":9},">= 8.15.0, \u003C= 8.15.0",true,"8.15.0","including",{"version":403,"is_range":399,"range_type":74,"version_start":404,"version_start_type":401,"version_end":404,"version_end_type":401,"fixed_in":9},">= 8.14.1, \u003C= 8.14.1","8.14.1",{"version":406,"is_range":399,"range_type":74,"version_start":407,"version_start_type":401,"version_end":407,"version_end_type":401,"fixed_in":9},">= 8.14.0, \u003C= 8.14.0","8.14.0",{"version":409,"is_range":399,"range_type":74,"version_start":410,"version_start_type":401,"version_end":410,"version_end_type":401,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0","8.13.0",{"version":412,"is_range":399,"range_type":74,"version_start":413,"version_start_type":401,"version_end":413,"version_end_type":401,"fixed_in":9},">= 8.12.1, \u003C= 8.12.1","8.12.1",{"version":415,"is_range":399,"range_type":74,"version_start":416,"version_start_type":401,"version_end":416,"version_end_type":401,"fixed_in":9},">= 8.12.0, \u003C= 8.12.0","8.12.0",{"version":418,"is_range":399,"range_type":74,"version_start":419,"version_start_type":401,"version_end":419,"version_end_type":401,"fixed_in":9},">= 8.11.1, \u003C= 8.11.1","8.11.1",{"version":421,"is_range":399,"range_type":74,"version_start":422,"version_start_type":401,"version_end":422,"version_end_type":401,"fixed_in":9},">= 8.11.0, \u003C= 8.11.0","8.11.0",{"ecosystem":9,"name":394,"vendor":424,"product":394,"cpe_part":395,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":425},"haxx",[426],{"version":427,"is_range":399,"range_type":428,"version_start":422,"version_start_type":401,"version_end":429,"version_end_type":430,"fixed_in":9},"gte8.11.0_lt8.16.0","cpe","8.16.0","excluding"]