[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-5399":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":42,"related":43,"reserved_at":9,"published_at":47,"modified_at":48,"state":49,"summary":50,"references_raw":58,"kevs":80,"epss":81,"epss_history":84,"metrics":358,"affected":366},"CVE-2025-5399","Due to a mistake in libcurl's WebSocket code, a malicious server can send a\nparticularly crafted packet which makes libcurl get trapped in an endless\nbusy-loop.\n\nThere is no other way for the application to escape or exit this loop other\nthan killing the thread/process.\n\nThis might be used to DoS libcurl-using application.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","weakness","Incomplete","Base",[],[20],{"_key":21,"name":22,"source":23,"url":24,"maturity":25,"reliability_score":26,"verified":27,"type":9,"platforms":28,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_3B30C29DAD6C03DD","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/3168039","unknown",0.2,false,[],[],[],[32,34,36,38,40],{"_key":33},"SUSE-SU-2025:20675-1",{"_key":35},"SUSE-SU-2025:03198-1",{"_key":37},"OPENSUSE-SU-2025:15213-1",{"_key":39},"DEBIAN-CVE-2025-5399",{"_key":41},"ALPINE-CVE-2025-5399",[],[44,45,46],{"_key":33},{"_key":35},{"_key":37},"2025-06-07T07:49:09.370Z","2025-06-09T13:20:29.843Z","Analyzed",{"cisa_kev":27,"cisa_ransomware":27,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":49},"low",0.01226,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[59,65,69,75],{"url":60,"sources":61,"tags":63},"https://curl.se/docs/CVE-2025-5399.json",[56,62],"nvd",[64],"Vendor Advisory",{"url":66,"sources":67,"tags":68},"https://curl.se/docs/CVE-2025-5399.html",[56,62],[64],{"url":24,"sources":70,"tags":71},[56,62],[72,73,74],"Exploit","Issue Tracking","Third Party Advisory",{"url":76,"sources":77,"tags":78},"http://www.openwall.com/lists/oss-security/2025/06/04/2",[56,62],[79,74],"Mailing List",[],{"date":82,"score":52,"percentile":83},"2026-07-05",0.65204,[85,89,92,95,98,101,104,108,111,114,117,120,124,127,130,134,137,140,143,146,149,152,155,158,161,164,167,170,174,177,180,183,186,189,192,194,197,200,203,206,209,212,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,266,269,272,276,279,282,285,288,291,294,298,301,304,307,309,312,314,317,320,323,326,329,331,333,336,339,342,345,348,351,354],{"date":86,"score":87,"percentile":88},"2025-11-04",0.00042,0.12279,{"date":90,"score":87,"percentile":91},"2025-11-05",0.12309,{"date":93,"score":87,"percentile":94},"2025-11-06",0.12405,{"date":96,"score":87,"percentile":97},"2025-11-07",0.12421,{"date":99,"score":87,"percentile":100},"2025-11-08",0.12425,{"date":102,"score":87,"percentile":103},"2025-11-09",0.12407,{"date":105,"score":106,"percentile":107},"2025-11-10",0.00043,0.12997,{"date":109,"score":106,"percentile":110},"2025-11-11",0.13012,{"date":112,"score":106,"percentile":113},"2025-11-12",0.12986,{"date":115,"score":106,"percentile":116},"2025-11-13",0.13005,{"date":118,"score":106,"percentile":119},"2025-11-14",0.13019,{"date":121,"score":122,"percentile":123},"2025-11-15",0.00064,0.20159,{"date":125,"score":122,"percentile":126},"2025-11-16",0.20113,{"date":128,"score":122,"percentile":129},"2025-11-17",0.20041,{"date":131,"score":132,"percentile":133},"2025-11-18",0.00093,0.22443,{"date":135,"score":132,"percentile":136},"2025-11-19",0.22454,{"date":138,"score":132,"percentile":139},"2025-11-20",0.22462,{"date":141,"score":122,"percentile":142},"2025-11-21",0.20019,{"date":144,"score":122,"percentile":145},"2025-11-22",0.2002,{"date":147,"score":122,"percentile":148},"2025-11-23",0.19987,{"date":150,"score":122,"percentile":151},"2025-11-24",0.19963,{"date":153,"score":122,"percentile":154},"2025-11-25",0.19952,{"date":156,"score":122,"percentile":157},"2025-11-26",0.19944,{"date":159,"score":122,"percentile":160},"2025-11-27",0.19943,{"date":162,"score":122,"percentile":163},"2025-11-28",0.19927,{"date":165,"score":122,"percentile":166},"2025-11-29",0.19912,{"date":168,"score":122,"percentile":169},"2025-11-30",0.19914,{"date":171,"score":172,"percentile":173},"2025-12-01",0.0004,0.11772,{"date":175,"score":172,"percentile":176},"2025-12-02",0.11781,{"date":178,"score":172,"percentile":179},"2025-12-03",0.1179,{"date":181,"score":122,"percentile":182},"2025-12-04",0.19951,{"date":184,"score":122,"percentile":185},"2025-12-05",0.19996,{"date":187,"score":122,"percentile":188},"2025-12-06",0.19994,{"date":190,"score":122,"percentile":191},"2025-12-07",0.1998,{"date":193,"score":122,"percentile":26},"2025-12-08",{"date":195,"score":122,"percentile":196},"2025-12-09",0.20068,{"date":198,"score":122,"percentile":199},"2025-12-10",0.20138,{"date":201,"score":122,"percentile":202},"2025-12-11",0.20172,{"date":204,"score":122,"percentile":205},"2025-12-12",0.20198,{"date":207,"score":122,"percentile":208},"2025-12-13",0.20205,{"date":210,"score":122,"percentile":211},"2025-12-14",0.20158,{"date":213,"score":122,"percentile":199},"2025-12-15",{"date":215,"score":122,"percentile":216},"2025-12-16",0.20167,{"date":218,"score":122,"percentile":219},"2025-12-17",0.20249,{"date":221,"score":122,"percentile":222},"2025-12-18",0.20336,{"date":224,"score":122,"percentile":225},"2025-12-19",0.20356,{"date":227,"score":122,"percentile":228},"2025-12-20",0.20328,{"date":230,"score":122,"percentile":231},"2025-12-21",0.20276,{"date":233,"score":122,"percentile":234},"2025-12-22",0.20237,{"date":236,"score":122,"percentile":237},"2025-12-23",0.20235,{"date":239,"score":122,"percentile":240},"2025-12-24",0.2027,{"date":242,"score":122,"percentile":243},"2025-12-25",0.20355,{"date":245,"score":122,"percentile":246},"2025-12-26",0.20349,{"date":248,"score":122,"percentile":249},"2025-12-27",0.20348,{"date":251,"score":122,"percentile":252},"2025-12-28",0.20308,{"date":254,"score":122,"percentile":255},"2025-12-29",0.20264,{"date":257,"score":122,"percentile":258},"2025-12-30",0.20251,{"date":260,"score":122,"percentile":261},"2025-12-31",0.20305,{"date":263,"score":264,"percentile":265},"2026-01-01",0.00046,0.14229,{"date":267,"score":264,"percentile":268},"2026-01-02",0.1422,{"date":270,"score":264,"percentile":271},"2026-01-03",0.14189,{"date":273,"score":274,"percentile":275},"2026-01-04",0.00086,0.25272,{"date":277,"score":274,"percentile":278},"2026-01-05",0.25253,{"date":280,"score":274,"percentile":281},"2026-01-06",0.25259,{"date":283,"score":274,"percentile":284},"2026-01-07",0.25286,{"date":286,"score":274,"percentile":287},"2026-01-08",0.25331,{"date":289,"score":274,"percentile":290},"2026-01-09",0.25308,{"date":292,"score":274,"percentile":293},"2026-01-10",0.25283,{"date":295,"score":296,"percentile":297},"2026-01-11",0.00082,0.24401,{"date":299,"score":296,"percentile":300},"2026-01-12",0.24367,{"date":302,"score":296,"percentile":303},"2026-01-13",0.24345,{"date":305,"score":296,"percentile":306},"2026-01-14",0.24406,{"date":308,"score":296,"percentile":297},"2026-01-15",{"date":310,"score":296,"percentile":311},"2026-01-16",0.24431,{"date":313,"score":296,"percentile":311},"2026-01-17",{"date":315,"score":296,"percentile":316},"2026-01-18",0.24404,{"date":318,"score":296,"percentile":319},"2026-01-19",0.2436,{"date":321,"score":296,"percentile":322},"2026-01-20",0.24342,{"date":324,"score":296,"percentile":325},"2026-01-21",0.24292,{"date":327,"score":296,"percentile":328},"2026-01-22",0.24277,{"date":330,"score":296,"percentile":319},"2026-01-23",{"date":332,"score":296,"percentile":300},"2026-01-24",{"date":334,"score":296,"percentile":335},"2026-01-25",0.24288,{"date":337,"score":296,"percentile":338},"2026-01-26",0.24189,{"date":340,"score":296,"percentile":341},"2026-01-27",0.24182,{"date":343,"score":296,"percentile":344},"2026-01-28",0.24177,{"date":346,"score":296,"percentile":347},"2026-01-29",0.24131,{"date":349,"score":296,"percentile":350},"2026-01-30",0.24118,{"date":352,"score":296,"percentile":353},"2026-01-31",0.24113,{"date":355,"score":356,"percentile":357},"2026-02-01",0.00044,0.1323,[359,364],{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":360,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":361,"vectorString":57,"impactScore":362,"exploitabilityScore":363},"HIGH",6,10,{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":365,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":361,"vectorString":57,"impactScore":362,"exploitabilityScore":363},[367,379],{"ecosystem":9,"name":368,"vendor":368,"product":368,"cpe_part":369,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":370},"curl","a",[371,376],{"version":372,"is_range":373,"range_type":56,"version_start":374,"version_start_type":375,"version_end":374,"version_end_type":375,"fixed_in":9},">= 8.14.0, \u003C= 8.14.0",true,"8.14.0","including",{"version":377,"is_range":373,"range_type":56,"version_start":378,"version_start_type":375,"version_end":378,"version_end_type":375,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0","8.13.0",{"ecosystem":9,"name":368,"vendor":380,"product":368,"cpe_part":369,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":381},"haxx",[382],{"version":383,"is_range":373,"range_type":384,"version_start":378,"version_start_type":375,"version_end":385,"version_end_type":386,"fixed_in":9},"gte8.13.0_lt8.14.1","cpe","8.14.1","excluding"]