[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-11563":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":40,"aliases":41,"duplicate_of":9,"upstream":42,"downstream":43,"duplicates":70,"related":71,"reserved_at":9,"published_at":82,"modified_at":83,"state":84,"summary":85,"references_raw":94,"kevs":117,"epss":118,"epss_history":121,"metrics":394,"affected":402},"CVE-2025-11563","URLs containing percent-encoded slashes (`/` or `\\`) can trick wcurl into\nsaving the output file outside of the current directory without the user\nexplicitly asking for it.\n\nThis flaw only affects the wcurl command line tool.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","weakness","Stable","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-126","Path Traversal",[],{"id":25,"name":26,"techniques":27},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":29,"name":30,"techniques":31},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":33,"name":34,"techniques":35},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":37,"name":38,"techniques":39},"CAPEC-79","Using Slashes in Alternate Encoding",[],[],[],[],[44,46,48,50,52,54,56,58,60,62,64,66,68],{"_key":45},"SUSE-SU-2025:4309-1",{"_key":47},"SUSE-SU-2025:4180-1",{"_key":49},"SUSE-SU-2025:4300-1",{"_key":51},"SUSE-SU-2025:4236-1",{"_key":53},"OPENSUSE-SU-2025:15757-1",{"_key":55},"SUSE-SU-2025:21077-1",{"_key":57},"SUSE-SU-2025:21145-1",{"_key":59},"SUSE-SU-2025:21198-1",{"_key":61},"SUSE-SU-2025:21206-1",{"_key":63},"OPENSUSE-SU-2025:20090-1",{"_key":65},"UBUNTU-CVE-2025-11563",{"_key":67},"USN-8062-1",{"_key":69},"DEBIAN-CVE-2025-11563",[],[72,73,74,75,76,77,78,79,80,81],{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},"2026-02-25T07:20:47.012Z","2026-02-25T18:53:58.252Z","Analyzed",{"cisa_kev":86,"cisa_ransomware":86,"cisa_vendor":9,"epss_severity":87,"epss_score":88,"severity":89,"severity_score":90,"severity_version":91,"severity_source":92,"severity_vector":93,"severity_status":84},false,"low",0.00302,"medium",4.6,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",[95,101,106,112],{"url":96,"sources":97,"tags":99},"https://curl.se/docs/CVE-2025-11563.json",[92,98],"nvd",[100],"Vendor Advisory",{"url":102,"sources":103,"tags":104},"https://curl.se/docs/CVE-2025-11563.html",[92,98],[105,100],"Patch",{"url":107,"sources":108,"tags":109},"http://www.openwall.com/lists/oss-security/2025/11/04/1",[92,98],[110,111],"Mailing List","Third Party Advisory",{"url":113,"sources":114,"tags":115},"https://lists.debian.org/debian-release/2025/11/msg00504.html",[92,98],[116,110,111,105],"Release Notes",[],{"date":119,"score":88,"percentile":120},"2026-07-05",0.2192,[122,126,130,134,137,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,190,193,196,199,202,205,208,211,214,217,220,224,227,230,233,237,240,243,246,249,252,255,258,261,264,267,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,322,325,328,332,335,338,341,344,347,350,353,356,359,362,365,368,370,373,376,379,382,385,388,391],{"date":123,"score":124,"percentile":125},"2026-02-25",0.00008,0.00601,{"date":127,"score":128,"percentile":129},"2026-02-26",0.00013,0.02021,{"date":131,"score":132,"percentile":133},"2026-02-27",0.00023,0.05817,{"date":135,"score":132,"percentile":136},"2026-02-28",0.05821,{"date":138,"score":132,"percentile":139},"2026-03-01",0.059,{"date":141,"score":132,"percentile":142},"2026-03-02",0.05886,{"date":144,"score":132,"percentile":145},"2026-03-03",0.06013,{"date":147,"score":132,"percentile":148},"2026-03-04",0.05913,{"date":150,"score":132,"percentile":151},"2026-03-05",0.05942,{"date":153,"score":132,"percentile":154},"2026-03-06",0.05922,{"date":156,"score":132,"percentile":157},"2026-03-07",0.0593,{"date":159,"score":132,"percentile":160},"2026-03-08",0.05919,{"date":162,"score":132,"percentile":163},"2026-03-09",0.0589,{"date":165,"score":132,"percentile":166},"2026-03-10",0.05893,{"date":168,"score":132,"percentile":169},"2026-03-11",0.05911,{"date":171,"score":132,"percentile":172},"2026-03-12",0.05935,{"date":174,"score":132,"percentile":175},"2026-03-13",0.05951,{"date":177,"score":132,"percentile":178},"2026-03-14",0.05872,{"date":180,"score":132,"percentile":181},"2026-03-15",0.05861,{"date":183,"score":132,"percentile":184},"2026-03-16",0.05849,{"date":186,"score":132,"percentile":187},"2026-03-17",0.05834,{"date":189,"score":132,"percentile":187},"2026-03-18",{"date":191,"score":132,"percentile":192},"2026-03-19",0.0587,{"date":194,"score":132,"percentile":195},"2026-03-20",0.0588,{"date":197,"score":132,"percentile":198},"2026-03-21",0.06102,{"date":200,"score":132,"percentile":201},"2026-03-22",0.06092,{"date":203,"score":132,"percentile":204},"2026-03-23",0.06076,{"date":206,"score":132,"percentile":207},"2026-03-24",0.06058,{"date":209,"score":132,"percentile":210},"2026-03-25",0.06115,{"date":212,"score":132,"percentile":213},"2026-03-26",0.06164,{"date":215,"score":132,"percentile":216},"2026-03-27",0.06158,{"date":218,"score":132,"percentile":219},"2026-03-28",0.06167,{"date":221,"score":222,"percentile":223},"2026-03-29",0.00027,0.07313,{"date":225,"score":222,"percentile":226},"2026-03-30",0.07297,{"date":228,"score":222,"percentile":229},"2026-03-31",0.07266,{"date":231,"score":222,"percentile":232},"2026-04-01",0.07257,{"date":234,"score":235,"percentile":236},"2026-04-02",0.00017,0.0412,{"date":238,"score":235,"percentile":239},"2026-04-03",0.04137,{"date":241,"score":235,"percentile":242},"2026-04-04",0.04138,{"date":244,"score":235,"percentile":245},"2026-04-05",0.04135,{"date":247,"score":235,"percentile":248},"2026-04-06",0.04142,{"date":250,"score":235,"percentile":251},"2026-04-07",0.04155,{"date":253,"score":235,"percentile":254},"2026-04-08",0.04186,{"date":256,"score":235,"percentile":257},"2026-04-09",0.04201,{"date":259,"score":235,"percentile":260},"2026-04-10",0.04205,{"date":262,"score":235,"percentile":263},"2026-04-11",0.0418,{"date":265,"score":235,"percentile":266},"2026-04-12",0.04163,{"date":268,"score":235,"percentile":239},"2026-04-13",{"date":270,"score":235,"percentile":271},"2026-04-14",0.04099,{"date":273,"score":235,"percentile":274},"2026-04-15",0.04095,{"date":276,"score":235,"percentile":277},"2026-04-16",0.04108,{"date":279,"score":235,"percentile":280},"2026-04-17",0.04114,{"date":282,"score":235,"percentile":283},"2026-04-18",0.04116,{"date":285,"score":235,"percentile":286},"2026-04-19",0.04105,{"date":288,"score":235,"percentile":289},"2026-04-20",0.04091,{"date":291,"score":235,"percentile":292},"2026-04-21",0.04239,{"date":294,"score":235,"percentile":295},"2026-04-22",0.04246,{"date":297,"score":235,"percentile":298},"2026-04-23",0.04247,{"date":300,"score":235,"percentile":301},"2026-04-24",0.0425,{"date":303,"score":235,"percentile":304},"2026-04-25",0.04272,{"date":306,"score":235,"percentile":307},"2026-04-26",0.04269,{"date":309,"score":235,"percentile":310},"2026-04-27",0.04259,{"date":312,"score":235,"percentile":313},"2026-04-28",0.04287,{"date":315,"score":235,"percentile":316},"2026-04-29",0.04304,{"date":318,"score":235,"percentile":319},"2026-04-30",0.0431,{"date":321,"score":235,"percentile":319},"2026-05-01",{"date":323,"score":235,"percentile":324},"2026-05-02",0.04306,{"date":326,"score":235,"percentile":327},"2026-05-03",0.04296,{"date":329,"score":330,"percentile":331},"2026-05-04",0.0002,0.05506,{"date":333,"score":330,"percentile":334},"2026-05-05",0.05501,{"date":336,"score":330,"percentile":337},"2026-05-06",0.05509,{"date":339,"score":330,"percentile":340},"2026-05-07",0.05546,{"date":342,"score":330,"percentile":343},"2026-05-08",0.05543,{"date":345,"score":330,"percentile":346},"2026-05-09",0.05623,{"date":348,"score":330,"percentile":349},"2026-05-10",0.0564,{"date":351,"score":330,"percentile":352},"2026-05-11",0.0563,{"date":354,"score":330,"percentile":355},"2026-05-12",0.05632,{"date":357,"score":330,"percentile":358},"2026-05-13",0.05642,{"date":360,"score":330,"percentile":361},"2026-05-14",0.05635,{"date":363,"score":330,"percentile":364},"2026-05-15",0.05637,{"date":366,"score":330,"percentile":367},"2026-05-16",0.05649,{"date":369,"score":330,"percentile":358},"2026-05-17",{"date":371,"score":330,"percentile":372},"2026-05-18",0.05622,{"date":374,"score":330,"percentile":375},"2026-05-19",0.05618,{"date":377,"score":330,"percentile":378},"2026-05-20",0.05585,{"date":380,"score":330,"percentile":381},"2026-05-21",0.05577,{"date":383,"score":330,"percentile":384},"2026-05-22",0.05784,{"date":386,"score":330,"percentile":387},"2026-05-23",0.05767,{"date":389,"score":330,"percentile":390},"2026-05-24",0.05772,{"date":392,"score":330,"percentile":393},"2026-05-25",0.05756,[395,400],{"source":92,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":396,"cvss_v4_0":9},{"baseScore":90,"baseSeverity":397,"vectorString":93,"impactScore":398,"exploitabilityScore":399},"MEDIUM",4.2,5.4,{"source":98,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":401,"cvss_v4_0":9},{"baseScore":90,"baseSeverity":397,"vectorString":93,"impactScore":398,"exploitabilityScore":399},[403,424],{"ecosystem":9,"name":404,"vendor":404,"product":404,"cpe_part":405,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":406},"curl","a",[407,412,415,418,421],{"version":408,"is_range":409,"range_type":92,"version_start":410,"version_start_type":411,"version_end":410,"version_end_type":411,"fixed_in":9},">= 8.17.0, \u003C= 8.17.0",true,"8.17.0","including",{"version":413,"is_range":409,"range_type":92,"version_start":414,"version_start_type":411,"version_end":414,"version_end_type":411,"fixed_in":9},">= 8.16.0, \u003C= 8.16.0","8.16.0",{"version":416,"is_range":409,"range_type":92,"version_start":417,"version_start_type":411,"version_end":417,"version_end_type":411,"fixed_in":9},">= 8.15.0, \u003C= 8.15.0","8.15.0",{"version":419,"is_range":409,"range_type":92,"version_start":420,"version_start_type":411,"version_end":420,"version_end_type":411,"fixed_in":9},">= 8.14.1, \u003C= 8.14.1","8.14.1",{"version":422,"is_range":409,"range_type":92,"version_start":423,"version_start_type":411,"version_end":423,"version_end_type":411,"fixed_in":9},">= 8.14.0, \u003C= 8.14.0","8.14.0",{"ecosystem":9,"name":425,"vendor":404,"product":425,"cpe_part":405,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":426},"wcurl",[427],{"version":428,"is_range":409,"range_type":429,"version_start":430,"version_start_type":411,"version_end":431,"version_end_type":432,"fixed_in":9},"gte2024-12-08_lt2025-11-09","cpe","2024-12-08","2025-11-09","excluding"]