[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-13034":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":43,"related":44,"reserved_at":9,"published_at":46,"modified_at":47,"state":48,"summary":49,"references_raw":58,"kevs":70,"epss":71,"epss_history":74,"metrics":334,"affected":342},"CVE-2025-13034","When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey`\nwith the curl tool,curl should check the public key of the server certificate\nto verify the peer.\n\nThis check was skipped in a certain condition that would then make curl allow\nthe connection without performing the proper check, thus not noticing a\npossible impostor. To skip this check, the connection had to be done with QUIC\nwith ngtcp2 built to use GnuTLS and the user had to explicitly disable the\nstandard certificate verification.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[],[],[31,33,35,37,39,41],{"_key":32},"MGASA-2026-0003",{"_key":34},"UBUNTU-CVE-2025-13034",{"_key":36},"USN-8062-1",{"_key":38},"DEBIAN-CVE-2025-13034",{"_key":40},"ALPINE-CVE-2025-13034",{"_key":42},"RHSA-2026:6893",[],[45],{"_key":32},"2026-01-08T10:00:25.773Z","2026-01-08T14:58:20.565Z","Analyzed",{"cisa_kev":50,"cisa_ransomware":50,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":48},false,"low",0.00227,"medium",5.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",[59,65],{"url":60,"sources":61,"tags":63},"https://curl.se/docs/CVE-2025-13034.json",[56,62],"nvd",[64],"Vendor Advisory",{"url":66,"sources":67,"tags":68},"https://curl.se/docs/CVE-2025-13034.html",[56,62],[64,69],"Patch",[],{"date":72,"score":52,"percentile":73},"2026-07-05",0.13349,[75,79,83,85,88,91,94,98,101,104,107,110,113,116,120,123,126,129,132,135,138,141,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,204,206,209,212,215,218,221,224,226,228,231,233,235,238,241,244,247,250,252,255,257,259,262,265,268,270,272,275,278,281,284,288,291,294,297,300,303,306,309,312,314,317,320,323,326,328,330,332],{"date":76,"score":77,"percentile":78},"2026-01-08",0.0001,0.0081,{"date":80,"score":81,"percentile":82},"2026-01-09",0.00016,0.0287,{"date":84,"score":81,"percentile":82},"2026-01-10",{"date":86,"score":81,"percentile":87},"2026-01-11",0.02856,{"date":89,"score":81,"percentile":90},"2026-01-12",0.02812,{"date":92,"score":81,"percentile":93},"2026-01-13",0.02805,{"date":95,"score":96,"percentile":97},"2026-01-14",0.00021,0.04869,{"date":99,"score":96,"percentile":100},"2026-01-15",0.04787,{"date":102,"score":96,"percentile":103},"2026-01-16",0.04757,{"date":105,"score":96,"percentile":106},"2026-01-17",0.04761,{"date":108,"score":96,"percentile":109},"2026-01-18",0.04751,{"date":111,"score":96,"percentile":112},"2026-01-19",0.04703,{"date":114,"score":96,"percentile":115},"2026-01-20",0.04655,{"date":117,"score":118,"percentile":119},"2026-01-21",0.00019,0.04145,{"date":121,"score":118,"percentile":122},"2026-01-22",0.04146,{"date":124,"score":118,"percentile":125},"2026-01-23",0.04196,{"date":127,"score":118,"percentile":128},"2026-01-24",0.0424,{"date":130,"score":118,"percentile":131},"2026-01-25",0.04233,{"date":133,"score":118,"percentile":134},"2026-01-26",0.04223,{"date":136,"score":118,"percentile":137},"2026-01-27",0.0421,{"date":139,"score":118,"percentile":140},"2026-01-28",0.04194,{"date":142,"score":118,"percentile":137},"2026-01-29",{"date":144,"score":118,"percentile":145},"2026-01-30",0.04213,{"date":147,"score":118,"percentile":148},"2026-01-31",0.0419,{"date":150,"score":118,"percentile":151},"2026-02-01",0.04295,{"date":153,"score":118,"percentile":154},"2026-02-02",0.04279,{"date":156,"score":118,"percentile":157},"2026-02-03",0.04268,{"date":159,"score":118,"percentile":160},"2026-02-04",0.04263,{"date":162,"score":118,"percentile":163},"2026-02-05",0.04315,{"date":165,"score":118,"percentile":166},"2026-02-06",0.04304,{"date":168,"score":118,"percentile":169},"2026-02-07",0.04329,{"date":171,"score":118,"percentile":172},"2026-02-08",0.0432,{"date":174,"score":96,"percentile":175},"2026-02-09",0.04795,{"date":177,"score":96,"percentile":178},"2026-02-10",0.04792,{"date":180,"score":96,"percentile":181},"2026-02-11",0.04883,{"date":183,"score":96,"percentile":184},"2026-02-12",0.04941,{"date":186,"score":96,"percentile":187},"2026-02-13",0.04967,{"date":189,"score":96,"percentile":190},"2026-02-14",0.04994,{"date":192,"score":96,"percentile":193},"2026-02-15",0.05017,{"date":195,"score":96,"percentile":196},"2026-02-16",0.05011,{"date":198,"score":96,"percentile":199},"2026-02-17",0.04991,{"date":201,"score":202,"percentile":203},"2026-02-18",0.00008,0.00626,{"date":205,"score":202,"percentile":203},"2026-02-19",{"date":207,"score":202,"percentile":208},"2026-02-20",0.00631,{"date":210,"score":202,"percentile":211},"2026-02-21",0.0063,{"date":213,"score":202,"percentile":214},"2026-02-22",0.00629,{"date":216,"score":202,"percentile":217},"2026-02-23",0.00625,{"date":219,"score":202,"percentile":220},"2026-02-24",0.00622,{"date":222,"score":202,"percentile":223},"2026-02-25",0.00624,{"date":225,"score":202,"percentile":203},"2026-02-26",{"date":227,"score":202,"percentile":214},"2026-02-27",{"date":229,"score":202,"percentile":230},"2026-02-28",0.00632,{"date":232,"score":202,"percentile":211},"2026-03-01",{"date":234,"score":202,"percentile":203},"2026-03-02",{"date":236,"score":202,"percentile":237},"2026-03-03",0.00635,{"date":239,"score":202,"percentile":240},"2026-03-04",0.00643,{"date":242,"score":202,"percentile":243},"2026-03-05",0.0065,{"date":245,"score":202,"percentile":246},"2026-03-06",0.00648,{"date":248,"score":202,"percentile":249},"2026-03-07",0.00649,{"date":251,"score":202,"percentile":246},"2026-03-08",{"date":253,"score":202,"percentile":254},"2026-03-09",0.00651,{"date":256,"score":202,"percentile":254},"2026-03-10",{"date":258,"score":202,"percentile":249},"2026-03-11",{"date":260,"score":202,"percentile":261},"2026-03-12",0.00654,{"date":263,"score":202,"percentile":264},"2026-03-13",0.00653,{"date":266,"score":202,"percentile":267},"2026-03-14",0.00652,{"date":269,"score":202,"percentile":254},"2026-03-15",{"date":271,"score":202,"percentile":246},"2026-03-16",{"date":273,"score":202,"percentile":274},"2026-03-17",0.00693,{"date":276,"score":202,"percentile":277},"2026-03-18",0.00695,{"date":279,"score":202,"percentile":280},"2026-03-19",0.00696,{"date":282,"score":202,"percentile":283},"2026-03-20",0.00694,{"date":285,"score":286,"percentile":287},"2026-03-21",0.00011,0.01225,{"date":289,"score":286,"percentile":290},"2026-03-22",0.01216,{"date":292,"score":286,"percentile":293},"2026-03-23",0.01213,{"date":295,"score":286,"percentile":296},"2026-03-24",0.01207,{"date":298,"score":286,"percentile":299},"2026-03-25",0.01211,{"date":301,"score":286,"percentile":302},"2026-03-26",0.01214,{"date":304,"score":286,"percentile":305},"2026-03-27",0.01218,{"date":307,"score":286,"percentile":308},"2026-03-28",0.0122,{"date":310,"score":286,"percentile":311},"2026-03-29",0.01219,{"date":313,"score":286,"percentile":302},"2026-03-30",{"date":315,"score":286,"percentile":316},"2026-03-31",0.01197,{"date":318,"score":286,"percentile":319},"2026-04-01",0.01196,{"date":321,"score":286,"percentile":322},"2026-04-02",0.01204,{"date":324,"score":286,"percentile":325},"2026-04-03",0.01209,{"date":327,"score":286,"percentile":299},"2026-04-04",{"date":329,"score":286,"percentile":299},"2026-04-05",{"date":331,"score":286,"percentile":290},"2026-04-06",{"date":333,"score":286,"percentile":308},"2026-04-07",[335,340],{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":336,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":337,"vectorString":57,"impactScore":338,"exploitabilityScore":339},"MEDIUM",6,5.6,{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":341,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":337,"vectorString":57,"impactScore":338,"exploitabilityScore":339},[343,394],{"ecosystem":9,"name":344,"vendor":344,"product":344,"cpe_part":345,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":346},"curl","a",[347,352,355,358,361,364,367,370,373,376,379,382,385,388,391],{"version":348,"is_range":349,"range_type":56,"version_start":350,"version_start_type":351,"version_end":350,"version_end_type":351,"fixed_in":9},">= 8.17.0, \u003C= 8.17.0",true,"8.17.0","including",{"version":353,"is_range":349,"range_type":56,"version_start":354,"version_start_type":351,"version_end":354,"version_end_type":351,"fixed_in":9},">= 8.16.0, \u003C= 8.16.0","8.16.0",{"version":356,"is_range":349,"range_type":56,"version_start":357,"version_start_type":351,"version_end":357,"version_end_type":351,"fixed_in":9},">= 8.15.0, \u003C= 8.15.0","8.15.0",{"version":359,"is_range":349,"range_type":56,"version_start":360,"version_start_type":351,"version_end":360,"version_end_type":351,"fixed_in":9},">= 8.14.1, \u003C= 8.14.1","8.14.1",{"version":362,"is_range":349,"range_type":56,"version_start":363,"version_start_type":351,"version_end":363,"version_end_type":351,"fixed_in":9},">= 8.14.0, \u003C= 8.14.0","8.14.0",{"version":365,"is_range":349,"range_type":56,"version_start":366,"version_start_type":351,"version_end":366,"version_end_type":351,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0","8.13.0",{"version":368,"is_range":349,"range_type":56,"version_start":369,"version_start_type":351,"version_end":369,"version_end_type":351,"fixed_in":9},">= 8.12.1, \u003C= 8.12.1","8.12.1",{"version":371,"is_range":349,"range_type":56,"version_start":372,"version_start_type":351,"version_end":372,"version_end_type":351,"fixed_in":9},">= 8.12.0, \u003C= 8.12.0","8.12.0",{"version":374,"is_range":349,"range_type":56,"version_start":375,"version_start_type":351,"version_end":375,"version_end_type":351,"fixed_in":9},">= 8.11.1, \u003C= 8.11.1","8.11.1",{"version":377,"is_range":349,"range_type":56,"version_start":378,"version_start_type":351,"version_end":378,"version_end_type":351,"fixed_in":9},">= 8.11.0, \u003C= 8.11.0","8.11.0",{"version":380,"is_range":349,"range_type":56,"version_start":381,"version_start_type":351,"version_end":381,"version_end_type":351,"fixed_in":9},">= 8.10.1, \u003C= 8.10.1","8.10.1",{"version":383,"is_range":349,"range_type":56,"version_start":384,"version_start_type":351,"version_end":384,"version_end_type":351,"fixed_in":9},">= 8.10.0, \u003C= 8.10.0","8.10.0",{"version":386,"is_range":349,"range_type":56,"version_start":387,"version_start_type":351,"version_end":387,"version_end_type":351,"fixed_in":9},">= 8.9.1, \u003C= 8.9.1","8.9.1",{"version":389,"is_range":349,"range_type":56,"version_start":390,"version_start_type":351,"version_end":390,"version_end_type":351,"fixed_in":9},">= 8.9.0, \u003C= 8.9.0","8.9.0",{"version":392,"is_range":349,"range_type":56,"version_start":393,"version_start_type":351,"version_end":393,"version_end_type":351,"fixed_in":9},">= 8.8.0, \u003C= 8.8.0","8.8.0",{"ecosystem":9,"name":344,"vendor":395,"product":344,"cpe_part":345,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":396},"haxx",[397],{"version":398,"is_range":349,"range_type":399,"version_start":393,"version_start_type":351,"version_end":400,"version_end_type":401,"fixed_in":9},"gte8.8.0_lt8.18.0","cpe","8.18.0","excluding"]