[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-4947":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":37,"duplicate_of":9,"upstream":38,"downstream":39,"duplicates":50,"related":51,"reserved_at":9,"published_at":55,"modified_at":56,"state":57,"summary":58,"references_raw":66,"kevs":89,"epss":90,"epss_history":93,"metrics":365,"affected":373},"CVE-2025-4947","libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[28],{"_key":29,"name":30,"source":31,"url":32,"maturity":33,"reliability_score":34,"verified":35,"type":9,"platforms":36,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_FEE64DCAD6602B64","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/3150884","unknown",0.2,false,[],[],[],[40,42,44,46,48],{"_key":41},"SUSE-SU-2025:20675-1",{"_key":43},"SUSE-SU-2025:03198-1",{"_key":45},"OPENSUSE-SU-2025:15176-1",{"_key":47},"DEBIAN-CVE-2025-4947",{"_key":49},"ALPINE-CVE-2025-4947",[],[52,53,54],{"_key":41},{"_key":43},{"_key":45},"2025-05-28T06:29:34.974Z","2025-05-28T13:58:33.430Z","Analyzed",{"cisa_kev":35,"cisa_ransomware":35,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":57},"low",0.00236,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",[67,73,78,83],{"url":68,"sources":69,"tags":71},"https://curl.se/docs/CVE-2025-4947.json",[64,70],"nvd",[72],"Vendor Advisory",{"url":74,"sources":75,"tags":76},"https://curl.se/docs/CVE-2025-4947.html",[64,70],[77,72],"Patch",{"url":32,"sources":79,"tags":80},[64,70],[81,82,77],"Exploit","Issue Tracking",{"url":84,"sources":85,"tags":86},"http://www.openwall.com/lists/oss-security/2025/05/28/4",[64,70],[87,77,88],"Mailing List","Third Party Advisory",[],{"date":91,"score":60,"percentile":92},"2026-07-05",0.14544,[94,98,102,105,108,111,114,117,120,123,126,129,132,134,137,141,144,147,150,153,156,159,162,165,168,170,173,176,180,183,186,188,191,194,197,199,202,205,208,211,214,217,220,223,226,229,231,233,236,240,243,246,249,252,254,257,260,263,266,269,272,275,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,361],{"date":95,"score":96,"percentile":97},"2025-11-04",0.00013,0.01399,{"date":99,"score":100,"percentile":101},"2025-11-05",0.00017,0.02799,{"date":103,"score":100,"percentile":104},"2025-11-06",0.02826,{"date":106,"score":100,"percentile":107},"2025-11-07",0.02837,{"date":109,"score":100,"percentile":110},"2025-11-08",0.02846,{"date":112,"score":100,"percentile":113},"2025-11-09",0.02848,{"date":115,"score":100,"percentile":116},"2025-11-10",0.02827,{"date":118,"score":100,"percentile":119},"2025-11-11",0.02849,{"date":121,"score":100,"percentile":122},"2025-11-12",0.02864,{"date":124,"score":100,"percentile":125},"2025-11-13",0.02892,{"date":127,"score":100,"percentile":128},"2025-11-14",0.02912,{"date":130,"score":100,"percentile":131},"2025-11-15",0.02941,{"date":133,"score":100,"percentile":131},"2025-11-16",{"date":135,"score":100,"percentile":136},"2025-11-17",0.02927,{"date":138,"score":139,"percentile":140},"2025-11-18",0.00028,0.04024,{"date":142,"score":139,"percentile":143},"2025-11-19",0.04067,{"date":145,"score":139,"percentile":146},"2025-11-20",0.04123,{"date":148,"score":100,"percentile":149},"2025-11-21",0.03014,{"date":151,"score":100,"percentile":152},"2025-11-22",0.03012,{"date":154,"score":100,"percentile":155},"2025-11-23",0.03005,{"date":157,"score":100,"percentile":158},"2025-11-24",0.02995,{"date":160,"score":100,"percentile":161},"2025-11-25",0.02976,{"date":163,"score":100,"percentile":164},"2025-11-26",0.02955,{"date":166,"score":100,"percentile":167},"2025-11-27",0.02954,{"date":169,"score":100,"percentile":164},"2025-11-28",{"date":171,"score":100,"percentile":172},"2025-11-29",0.03006,{"date":174,"score":100,"percentile":175},"2025-11-30",0.03007,{"date":177,"score":178,"percentile":179},"2025-12-01",0.00025,0.05961,{"date":181,"score":178,"percentile":182},"2025-12-02",0.05975,{"date":184,"score":178,"percentile":185},"2025-12-03",0.05987,{"date":187,"score":100,"percentile":175},"2025-12-04",{"date":189,"score":100,"percentile":190},"2025-12-05",0.03027,{"date":192,"score":100,"percentile":193},"2025-12-06",0.03047,{"date":195,"score":100,"percentile":196},"2025-12-07",0.03051,{"date":198,"score":100,"percentile":193},"2025-12-08",{"date":200,"score":100,"percentile":201},"2025-12-09",0.03065,{"date":203,"score":100,"percentile":204},"2025-12-10",0.03103,{"date":206,"score":100,"percentile":207},"2025-12-11",0.03105,{"date":209,"score":100,"percentile":210},"2025-12-12",0.03116,{"date":212,"score":100,"percentile":213},"2025-12-13",0.03088,{"date":215,"score":100,"percentile":216},"2025-12-14",0.03092,{"date":218,"score":100,"percentile":219},"2025-12-15",0.03084,{"date":221,"score":100,"percentile":222},"2025-12-16",0.03082,{"date":224,"score":100,"percentile":225},"2025-12-17",0.03099,{"date":227,"score":100,"percentile":228},"2025-12-18",0.03108,{"date":230,"score":100,"percentile":228},"2025-12-19",{"date":232,"score":100,"percentile":204},"2025-12-20",{"date":234,"score":100,"percentile":235},"2025-12-21",0.03114,{"date":237,"score":238,"percentile":239},"2025-12-22",0.00019,0.04288,{"date":241,"score":238,"percentile":242},"2025-12-23",0.04296,{"date":244,"score":238,"percentile":245},"2025-12-24",0.04317,{"date":247,"score":238,"percentile":248},"2025-12-25",0.04359,{"date":250,"score":238,"percentile":251},"2025-12-26",0.0436,{"date":253,"score":238,"percentile":251},"2025-12-27",{"date":255,"score":238,"percentile":256},"2025-12-28",0.04361,{"date":258,"score":238,"percentile":259},"2025-12-29",0.04354,{"date":261,"score":238,"percentile":262},"2025-12-30",0.04292,{"date":264,"score":238,"percentile":265},"2025-12-31",0.04314,{"date":267,"score":139,"percentile":268},"2026-01-01",0.07316,{"date":270,"score":139,"percentile":271},"2026-01-02",0.07313,{"date":273,"score":139,"percentile":274},"2026-01-03",0.07308,{"date":276,"score":277,"percentile":278},"2026-01-04",0.00018,0.03925,{"date":280,"score":277,"percentile":281},"2026-01-05",0.03889,{"date":283,"score":277,"percentile":284},"2026-01-06",0.03882,{"date":286,"score":277,"percentile":287},"2026-01-07",0.03907,{"date":289,"score":277,"percentile":290},"2026-01-08",0.03941,{"date":292,"score":277,"percentile":293},"2026-01-09",0.03942,{"date":295,"score":277,"percentile":296},"2026-01-10",0.03951,{"date":298,"score":277,"percentile":299},"2026-01-11",0.03929,{"date":301,"score":277,"percentile":302},"2026-01-12",0.0394,{"date":304,"score":277,"percentile":305},"2026-01-13",0.03933,{"date":307,"score":277,"percentile":308},"2026-01-14",0.03969,{"date":310,"score":277,"percentile":311},"2026-01-15",0.03895,{"date":313,"score":277,"percentile":314},"2026-01-16",0.03868,{"date":316,"score":277,"percentile":317},"2026-01-17",0.03869,{"date":319,"score":277,"percentile":320},"2026-01-18",0.03844,{"date":322,"score":277,"percentile":323},"2026-01-19",0.038,{"date":325,"score":277,"percentile":326},"2026-01-20",0.0377,{"date":328,"score":277,"percentile":329},"2026-01-21",0.03762,{"date":331,"score":277,"percentile":332},"2026-01-22",0.03768,{"date":334,"score":277,"percentile":335},"2026-01-23",0.03813,{"date":337,"score":277,"percentile":338},"2026-01-24",0.03845,{"date":340,"score":277,"percentile":341},"2026-01-25",0.03824,{"date":343,"score":277,"percentile":344},"2026-01-26",0.03809,{"date":346,"score":277,"percentile":347},"2026-01-27",0.03797,{"date":349,"score":277,"percentile":350},"2026-01-28",0.03784,{"date":352,"score":277,"percentile":353},"2026-01-29",0.03803,{"date":355,"score":277,"percentile":356},"2026-01-30",0.03802,{"date":358,"score":359,"percentile":360},"2026-01-31",0.0002,0.04348,{"date":362,"score":363,"percentile":364},"2026-02-01",0.0003,0.0817,[366,371],{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":367,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":368,"vectorString":65,"impactScore":369,"exploitabilityScore":370},"MEDIUM",4.2,10,{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":372,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":368,"vectorString":65,"impactScore":369,"exploitabilityScore":370},[374,410],{"ecosystem":9,"name":375,"vendor":375,"product":375,"cpe_part":376,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":377},"curl","a",[378,383,386,389,392,395,398,401,404,407],{"version":379,"is_range":380,"range_type":64,"version_start":381,"version_start_type":382,"version_end":381,"version_end_type":382,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0",true,"8.13.0","including",{"version":384,"is_range":380,"range_type":64,"version_start":385,"version_start_type":382,"version_end":385,"version_end_type":382,"fixed_in":9},">= 8.12.1, \u003C= 8.12.1","8.12.1",{"version":387,"is_range":380,"range_type":64,"version_start":388,"version_start_type":382,"version_end":388,"version_end_type":382,"fixed_in":9},">= 8.12.0, \u003C= 8.12.0","8.12.0",{"version":390,"is_range":380,"range_type":64,"version_start":391,"version_start_type":382,"version_end":391,"version_end_type":382,"fixed_in":9},">= 8.11.1, \u003C= 8.11.1","8.11.1",{"version":393,"is_range":380,"range_type":64,"version_start":394,"version_start_type":382,"version_end":394,"version_end_type":382,"fixed_in":9},">= 8.11.0, \u003C= 8.11.0","8.11.0",{"version":396,"is_range":380,"range_type":64,"version_start":397,"version_start_type":382,"version_end":397,"version_end_type":382,"fixed_in":9},">= 8.10.1, \u003C= 8.10.1","8.10.1",{"version":399,"is_range":380,"range_type":64,"version_start":400,"version_start_type":382,"version_end":400,"version_end_type":382,"fixed_in":9},">= 8.10.0, \u003C= 8.10.0","8.10.0",{"version":402,"is_range":380,"range_type":64,"version_start":403,"version_start_type":382,"version_end":403,"version_end_type":382,"fixed_in":9},">= 8.9.1, \u003C= 8.9.1","8.9.1",{"version":405,"is_range":380,"range_type":64,"version_start":406,"version_start_type":382,"version_end":406,"version_end_type":382,"fixed_in":9},">= 8.9.0, \u003C= 8.9.0","8.9.0",{"version":408,"is_range":380,"range_type":64,"version_start":409,"version_start_type":382,"version_end":409,"version_end_type":382,"fixed_in":9},">= 8.8.0, \u003C= 8.8.0","8.8.0",{"ecosystem":9,"name":375,"vendor":411,"product":375,"cpe_part":376,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":412},"haxx",[413],{"version":414,"is_range":380,"range_type":415,"version_start":409,"version_start_type":382,"version_end":416,"version_end_type":417,"fixed_in":9},"gte8.8.0_lt8.14.0","cpe","8.14.0","excluding"]