[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-5025":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":37,"duplicate_of":9,"upstream":38,"downstream":39,"duplicates":50,"related":51,"reserved_at":9,"published_at":55,"modified_at":56,"state":57,"summary":58,"references_raw":66,"kevs":88,"epss":89,"epss_history":92,"metrics":366,"affected":374},"CVE-2025-5025","libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC and HTTP/3. Since pinning makes the transfer succeed if the pin is fine, users could unwittingly connect to an impostor server without noticing.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[28],{"_key":29,"name":30,"source":31,"url":32,"maturity":33,"reliability_score":34,"verified":35,"type":9,"platforms":36,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_B8D5DA1BDC6A0FD2","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/3153497","unknown",0.2,false,[],[],[],[40,42,44,46,48],{"_key":41},"SUSE-SU-2025:20675-1",{"_key":43},"SUSE-SU-2025:03198-1",{"_key":45},"OPENSUSE-SU-2025:15176-1",{"_key":47},"DEBIAN-CVE-2025-5025",{"_key":49},"ALPINE-CVE-2025-5025",[],[52,53,54],{"_key":41},{"_key":43},{"_key":45},"2025-05-28T06:29:51.915Z","2025-05-30T16:19:53.775Z","Analyzed",{"cisa_kev":35,"cisa_ransomware":35,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":57},"low",0.00241,"medium",4.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",[67,73,77,83],{"url":68,"sources":69,"tags":71},"https://curl.se/docs/CVE-2025-5025.json",[64,70],"nvd",[72],"Vendor Advisory",{"url":74,"sources":75,"tags":76},"https://curl.se/docs/CVE-2025-5025.html",[64,70],[72],{"url":32,"sources":78,"tags":79},[64,70],[80,81,82],"Exploit","Issue Tracking","Third Party Advisory",{"url":84,"sources":85,"tags":86},"http://www.openwall.com/lists/oss-security/2025/05/28/5",[64,70],[87,82],"Mailing List",[],{"date":90,"score":60,"percentile":91},"2026-07-05",0.15121,[93,97,101,104,107,110,113,116,119,122,125,128,131,134,137,141,144,147,150,153,156,159,162,165,168,170,173,176,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,239,243,246,249,252,255,257,260,263,265,268,271,274,276,280,283,286,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,362],{"date":94,"score":95,"percentile":96},"2025-11-04",0.00014,0.01592,{"date":98,"score":99,"percentile":100},"2025-11-05",0.00018,0.0316,{"date":102,"score":99,"percentile":103},"2025-11-06",0.03184,{"date":105,"score":99,"percentile":106},"2025-11-07",0.03191,{"date":108,"score":99,"percentile":109},"2025-11-08",0.03195,{"date":111,"score":99,"percentile":112},"2025-11-09",0.032,{"date":114,"score":99,"percentile":115},"2025-11-10",0.03186,{"date":117,"score":99,"percentile":118},"2025-11-11",0.03208,{"date":120,"score":99,"percentile":121},"2025-11-12",0.03217,{"date":123,"score":99,"percentile":124},"2025-11-13",0.03247,{"date":126,"score":99,"percentile":127},"2025-11-14",0.03261,{"date":129,"score":99,"percentile":130},"2025-11-15",0.0329,{"date":132,"score":99,"percentile":133},"2025-11-16",0.03288,{"date":135,"score":99,"percentile":136},"2025-11-17",0.03276,{"date":138,"score":139,"percentile":140},"2025-11-18",0.0003,0.04489,{"date":142,"score":139,"percentile":143},"2025-11-19",0.0453,{"date":145,"score":139,"percentile":146},"2025-11-20",0.04585,{"date":148,"score":99,"percentile":149},"2025-11-21",0.03381,{"date":151,"score":99,"percentile":152},"2025-11-22",0.03386,{"date":154,"score":99,"percentile":155},"2025-11-23",0.03382,{"date":157,"score":99,"percentile":158},"2025-11-24",0.03362,{"date":160,"score":99,"percentile":161},"2025-11-25",0.03359,{"date":163,"score":99,"percentile":164},"2025-11-26",0.0337,{"date":166,"score":99,"percentile":167},"2025-11-27",0.03385,{"date":169,"score":99,"percentile":167},"2025-11-28",{"date":171,"score":99,"percentile":172},"2025-11-29",0.0343,{"date":174,"score":99,"percentile":175},"2025-11-30",0.03433,{"date":177,"score":178,"percentile":179},"2025-12-01",0.00028,0.06862,{"date":181,"score":178,"percentile":182},"2025-12-02",0.06871,{"date":184,"score":178,"percentile":185},"2025-12-03",0.06887,{"date":187,"score":99,"percentile":188},"2025-12-04",0.0349,{"date":190,"score":99,"percentile":191},"2025-12-05",0.03537,{"date":193,"score":99,"percentile":194},"2025-12-06",0.03551,{"date":196,"score":99,"percentile":197},"2025-12-07",0.03556,{"date":199,"score":99,"percentile":200},"2025-12-08",0.03553,{"date":202,"score":99,"percentile":203},"2025-12-09",0.03578,{"date":205,"score":99,"percentile":206},"2025-12-10",0.03616,{"date":208,"score":99,"percentile":209},"2025-12-11",0.03606,{"date":211,"score":99,"percentile":212},"2025-12-12",0.03619,{"date":214,"score":99,"percentile":215},"2025-12-13",0.03624,{"date":217,"score":99,"percentile":218},"2025-12-14",0.03623,{"date":220,"score":99,"percentile":221},"2025-12-15",0.03607,{"date":223,"score":99,"percentile":224},"2025-12-16",0.03625,{"date":226,"score":99,"percentile":227},"2025-12-17",0.03647,{"date":229,"score":99,"percentile":230},"2025-12-18",0.03665,{"date":232,"score":99,"percentile":233},"2025-12-19",0.03648,{"date":235,"score":99,"percentile":236},"2025-12-20",0.03645,{"date":238,"score":99,"percentile":230},"2025-12-21",{"date":240,"score":241,"percentile":242},"2025-12-22",0.0002,0.0467,{"date":244,"score":241,"percentile":245},"2025-12-23",0.0468,{"date":247,"score":241,"percentile":248},"2025-12-24",0.04703,{"date":250,"score":241,"percentile":251},"2025-12-25",0.04742,{"date":253,"score":241,"percentile":254},"2025-12-26",0.04743,{"date":256,"score":241,"percentile":254},"2025-12-27",{"date":258,"score":241,"percentile":259},"2025-12-28",0.04736,{"date":261,"score":241,"percentile":262},"2025-12-29",0.0473,{"date":264,"score":241,"percentile":242},"2025-12-30",{"date":266,"score":241,"percentile":267},"2025-12-31",0.04688,{"date":269,"score":139,"percentile":270},"2026-01-01",0.08256,{"date":272,"score":139,"percentile":273},"2026-01-02",0.0826,{"date":275,"score":139,"percentile":270},"2026-01-03",{"date":277,"score":278,"percentile":279},"2026-01-04",0.00019,0.04385,{"date":281,"score":278,"percentile":282},"2026-01-05",0.04334,{"date":284,"score":278,"percentile":285},"2026-01-06",0.04335,{"date":287,"score":278,"percentile":288},"2026-01-07",0.04356,{"date":290,"score":278,"percentile":291},"2026-01-08",0.0439,{"date":293,"score":278,"percentile":294},"2026-01-09",0.04393,{"date":296,"score":278,"percentile":297},"2026-01-10",0.044,{"date":299,"score":278,"percentile":300},"2026-01-11",0.04379,{"date":302,"score":278,"percentile":303},"2026-01-12",0.04375,{"date":305,"score":278,"percentile":306},"2026-01-13",0.04367,{"date":308,"score":278,"percentile":309},"2026-01-14",0.0441,{"date":311,"score":278,"percentile":312},"2026-01-15",0.04325,{"date":314,"score":278,"percentile":315},"2026-01-16",0.04294,{"date":317,"score":278,"percentile":318},"2026-01-17",0.04291,{"date":320,"score":278,"percentile":321},"2026-01-18",0.04272,{"date":323,"score":278,"percentile":324},"2026-01-19",0.04219,{"date":326,"score":278,"percentile":327},"2026-01-20",0.04177,{"date":329,"score":278,"percentile":330},"2026-01-21",0.04165,{"date":332,"score":278,"percentile":333},"2026-01-22",0.04163,{"date":335,"score":278,"percentile":336},"2026-01-23",0.04213,{"date":338,"score":278,"percentile":339},"2026-01-24",0.04258,{"date":341,"score":278,"percentile":342},"2026-01-25",0.0425,{"date":344,"score":278,"percentile":345},"2026-01-26",0.04237,{"date":347,"score":278,"percentile":348},"2026-01-27",0.04224,{"date":350,"score":278,"percentile":351},"2026-01-28",0.04208,{"date":353,"score":278,"percentile":354},"2026-01-29",0.04223,{"date":356,"score":278,"percentile":357},"2026-01-30",0.04227,{"date":359,"score":360,"percentile":361},"2026-01-31",0.00021,0.04686,{"date":363,"score":364,"percentile":365},"2026-02-01",0.00033,0.09107,[367,372],{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":368,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":369,"vectorString":65,"impactScore":370,"exploitabilityScore":371},"MEDIUM",4.2,5.6,{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":373,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":369,"vectorString":65,"impactScore":370,"exploitabilityScore":371},[375,423],{"ecosystem":9,"name":376,"vendor":376,"product":376,"cpe_part":377,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":378},"curl","a",[379,384,387,390,393,396,399,402,405,408,411,414,417,420],{"version":380,"is_range":381,"range_type":64,"version_start":382,"version_start_type":383,"version_end":382,"version_end_type":383,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0",true,"8.13.0","including",{"version":385,"is_range":381,"range_type":64,"version_start":386,"version_start_type":383,"version_end":386,"version_end_type":383,"fixed_in":9},">= 8.12.1, \u003C= 8.12.1","8.12.1",{"version":388,"is_range":381,"range_type":64,"version_start":389,"version_start_type":383,"version_end":389,"version_end_type":383,"fixed_in":9},">= 8.12.0, \u003C= 8.12.0","8.12.0",{"version":391,"is_range":381,"range_type":64,"version_start":392,"version_start_type":383,"version_end":392,"version_end_type":383,"fixed_in":9},">= 8.11.1, \u003C= 8.11.1","8.11.1",{"version":394,"is_range":381,"range_type":64,"version_start":395,"version_start_type":383,"version_end":395,"version_end_type":383,"fixed_in":9},">= 8.11.0, \u003C= 8.11.0","8.11.0",{"version":397,"is_range":381,"range_type":64,"version_start":398,"version_start_type":383,"version_end":398,"version_end_type":383,"fixed_in":9},">= 8.10.1, \u003C= 8.10.1","8.10.1",{"version":400,"is_range":381,"range_type":64,"version_start":401,"version_start_type":383,"version_end":401,"version_end_type":383,"fixed_in":9},">= 8.10.0, \u003C= 8.10.0","8.10.0",{"version":403,"is_range":381,"range_type":64,"version_start":404,"version_start_type":383,"version_end":404,"version_end_type":383,"fixed_in":9},">= 8.9.1, \u003C= 8.9.1","8.9.1",{"version":406,"is_range":381,"range_type":64,"version_start":407,"version_start_type":383,"version_end":407,"version_end_type":383,"fixed_in":9},">= 8.9.0, \u003C= 8.9.0","8.9.0",{"version":409,"is_range":381,"range_type":64,"version_start":410,"version_start_type":383,"version_end":410,"version_end_type":383,"fixed_in":9},">= 8.8.0, \u003C= 8.8.0","8.8.0",{"version":412,"is_range":381,"range_type":64,"version_start":413,"version_start_type":383,"version_end":413,"version_end_type":383,"fixed_in":9},">= 8.7.1, \u003C= 8.7.1","8.7.1",{"version":415,"is_range":381,"range_type":64,"version_start":416,"version_start_type":383,"version_end":416,"version_end_type":383,"fixed_in":9},">= 8.7.0, \u003C= 8.7.0","8.7.0",{"version":418,"is_range":381,"range_type":64,"version_start":419,"version_start_type":383,"version_end":419,"version_end_type":383,"fixed_in":9},">= 8.6.0, \u003C= 8.6.0","8.6.0",{"version":421,"is_range":381,"range_type":64,"version_start":422,"version_start_type":383,"version_end":422,"version_end_type":383,"fixed_in":9},">= 8.5.0, \u003C= 8.5.0","8.5.0",{"ecosystem":9,"name":376,"vendor":424,"product":376,"cpe_part":377,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":425},"haxx",[426],{"version":427,"is_range":381,"range_type":428,"version_start":422,"version_start_type":383,"version_end":429,"version_end_type":430,"fixed_in":9},"gte8.5.0_lt8.14.0","cpe","8.14.0","excluding"]