[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-12064":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":14,"duplicates":41,"related":42,"reserved_at":9,"published_at":50,"modified_at":51,"state":52,"summary":53,"references_raw":62,"kevs":75,"epss":76,"epss_history":79,"metrics":84,"affected":90},"CVE-2026-12064","When a user invokes curl using a schemeless URL combined with\n`--proto-default` sftp (or scp), a disconnect occurs between the tool layer\nand libcurl. The tool layer incorrectly infers the URL scheme, which\nerroneously bypasses the initialization of critical SSH security options like\nCURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the\nlibcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes\nthe connection via SFTP/SCP as specified. Because the tool layer skipped the\nsecurity configuration, these SSH host verification options are silently\nomitted, causing curl to connect to an unverified SSH remote host without\nthrowing an error.",null,[],[],[],[],[15,17,19,21,23,25,27,29,31,33,35,37,39],{"_key":16},"ALPINE-CVE-2026-12064",{"_key":18},"USN-8525-1",{"_key":20},"OPENSUSE-SU-2026:11230-1",{"_key":22},"SUSE-SU-2026:22553-1",{"_key":24},"SUSE-SU-2026:22582-1",{"_key":26},"SUSE-SU-2026:2925-1",{"_key":28},"SUSE-SU-2026:2926-1",{"_key":30},"SUSE-SU-2026:3043-1",{"_key":32},"RHSA-2026:29017",{"_key":34},"RHSA-2026:34975",{"_key":36},"UBUNTU-CVE-2026-12064",{"_key":38},"DEBIAN-CVE-2026-12064",{"_key":40},"OPENSUSE-SU-2026:21272-1",[],[43,44,45,46,47,48,49],{"_key":20},{"_key":22},{"_key":24},{"_key":26},{"_key":28},{"_key":30},{"_key":40},"2026-07-03T06:13:55.302Z","2026-07-06T18:21:00.665Z","PUBLISHED",{"cisa_kev":54,"cisa_ransomware":54,"cisa_vendor":9,"epss_severity":55,"epss_score":56,"severity":57,"severity_score":58,"severity_version":59,"severity_source":60,"severity_vector":61,"severity_status":52},false,"low",0.00208,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[63,67,71],{"url":64,"sources":65,"tags":66},"https://curl.se/docs/CVE-2026-12064.json",[60],[],{"url":68,"sources":69,"tags":70},"https://curl.se/docs/CVE-2026-12064.html",[60],[],{"url":72,"sources":73,"tags":74},"https://hackerone.com/reports/3797526",[60],[],[],{"date":77,"score":56,"percentile":78},"2026-07-05",0.10924,[80,83],{"date":81,"score":56,"percentile":82},"2026-07-04",0.10918,{"date":77,"score":56,"percentile":78},[85],{"source":60,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":86,"cvss_v4_0":9},{"baseScore":58,"baseSeverity":87,"vectorString":61,"impactScore":88,"exploitabilityScore":89},"HIGH",6,10,[91],{"ecosystem":9,"name":92,"vendor":92,"product":92,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":94},"curl","a",[95,100,103,106,109,112,115,118,121,124,127,130,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217],{"version":96,"is_range":97,"range_type":60,"version_start":98,"version_start_type":99,"version_end":98,"version_end_type":99,"fixed_in":9},">= 8.20.0, \u003C= 8.20.0",true,"8.20.0","including",{"version":101,"is_range":97,"range_type":60,"version_start":102,"version_start_type":99,"version_end":102,"version_end_type":99,"fixed_in":9},">= 8.19.0, \u003C= 8.19.0","8.19.0",{"version":104,"is_range":97,"range_type":60,"version_start":105,"version_start_type":99,"version_end":105,"version_end_type":99,"fixed_in":9},">= 8.18.0, \u003C= 8.18.0","8.18.0",{"version":107,"is_range":97,"range_type":60,"version_start":108,"version_start_type":99,"version_end":108,"version_end_type":99,"fixed_in":9},">= 8.17.0, \u003C= 8.17.0","8.17.0",{"version":110,"is_range":97,"range_type":60,"version_start":111,"version_start_type":99,"version_end":111,"version_end_type":99,"fixed_in":9},">= 8.16.0, \u003C= 8.16.0","8.16.0",{"version":113,"is_range":97,"range_type":60,"version_start":114,"version_start_type":99,"version_end":114,"version_end_type":99,"fixed_in":9},">= 8.15.0, \u003C= 8.15.0","8.15.0",{"version":116,"is_range":97,"range_type":60,"version_start":117,"version_start_type":99,"version_end":117,"version_end_type":99,"fixed_in":9},">= 8.14.1, \u003C= 8.14.1","8.14.1",{"version":119,"is_range":97,"range_type":60,"version_start":120,"version_start_type":99,"version_end":120,"version_end_type":99,"fixed_in":9},">= 8.14.0, \u003C= 8.14.0","8.14.0",{"version":122,"is_range":97,"range_type":60,"version_start":123,"version_start_type":99,"version_end":123,"version_end_type":99,"fixed_in":9},">= 8.13.0, \u003C= 8.13.0","8.13.0",{"version":125,"is_range":97,"range_type":60,"version_start":126,"version_start_type":99,"version_end":126,"version_end_type":99,"fixed_in":9},">= 8.12.1, \u003C= 8.12.1","8.12.1",{"version":128,"is_range":97,"range_type":60,"version_start":129,"version_start_type":99,"version_end":129,"version_end_type":99,"fixed_in":9},">= 8.12.0, \u003C= 8.12.0","8.12.0",{"version":131,"is_range":97,"range_type":60,"version_start":132,"version_start_type":99,"version_end":132,"version_end_type":99,"fixed_in":9},">= 8.11.1, \u003C= 8.11.1","8.11.1",{"version":134,"is_range":97,"range_type":60,"version_start":135,"version_start_type":99,"version_end":135,"version_end_type":99,"fixed_in":9},">= 8.11.0, \u003C= 8.11.0","8.11.0",{"version":137,"is_range":97,"range_type":60,"version_start":138,"version_start_type":99,"version_end":138,"version_end_type":99,"fixed_in":9},">= 8.10.1, \u003C= 8.10.1","8.10.1",{"version":140,"is_range":97,"range_type":60,"version_start":141,"version_start_type":99,"version_end":141,"version_end_type":99,"fixed_in":9},">= 8.10.0, \u003C= 8.10.0","8.10.0",{"version":143,"is_range":97,"range_type":60,"version_start":144,"version_start_type":99,"version_end":144,"version_end_type":99,"fixed_in":9},">= 8.9.1, \u003C= 8.9.1","8.9.1",{"version":146,"is_range":97,"range_type":60,"version_start":147,"version_start_type":99,"version_end":147,"version_end_type":99,"fixed_in":9},">= 8.9.0, \u003C= 8.9.0","8.9.0",{"version":149,"is_range":97,"range_type":60,"version_start":150,"version_start_type":99,"version_end":150,"version_end_type":99,"fixed_in":9},">= 8.8.0, \u003C= 8.8.0","8.8.0",{"version":152,"is_range":97,"range_type":60,"version_start":153,"version_start_type":99,"version_end":153,"version_end_type":99,"fixed_in":9},">= 8.7.1, \u003C= 8.7.1","8.7.1",{"version":155,"is_range":97,"range_type":60,"version_start":156,"version_start_type":99,"version_end":156,"version_end_type":99,"fixed_in":9},">= 8.7.0, \u003C= 8.7.0","8.7.0",{"version":158,"is_range":97,"range_type":60,"version_start":159,"version_start_type":99,"version_end":159,"version_end_type":99,"fixed_in":9},">= 8.6.0, \u003C= 8.6.0","8.6.0",{"version":161,"is_range":97,"range_type":60,"version_start":162,"version_start_type":99,"version_end":162,"version_end_type":99,"fixed_in":9},">= 8.5.0, \u003C= 8.5.0","8.5.0",{"version":164,"is_range":97,"range_type":60,"version_start":165,"version_start_type":99,"version_end":165,"version_end_type":99,"fixed_in":9},">= 8.4.0, \u003C= 8.4.0","8.4.0",{"version":167,"is_range":97,"range_type":60,"version_start":168,"version_start_type":99,"version_end":168,"version_end_type":99,"fixed_in":9},">= 8.3.0, \u003C= 8.3.0","8.3.0",{"version":170,"is_range":97,"range_type":60,"version_start":171,"version_start_type":99,"version_end":171,"version_end_type":99,"fixed_in":9},">= 8.2.1, \u003C= 8.2.1","8.2.1",{"version":173,"is_range":97,"range_type":60,"version_start":174,"version_start_type":99,"version_end":174,"version_end_type":99,"fixed_in":9},">= 8.2.0, \u003C= 8.2.0","8.2.0",{"version":176,"is_range":97,"range_type":60,"version_start":177,"version_start_type":99,"version_end":177,"version_end_type":99,"fixed_in":9},">= 8.1.2, \u003C= 8.1.2","8.1.2",{"version":179,"is_range":97,"range_type":60,"version_start":180,"version_start_type":99,"version_end":180,"version_end_type":99,"fixed_in":9},">= 8.1.1, \u003C= 8.1.1","8.1.1",{"version":182,"is_range":97,"range_type":60,"version_start":183,"version_start_type":99,"version_end":183,"version_end_type":99,"fixed_in":9},">= 8.1.0, \u003C= 8.1.0","8.1.0",{"version":185,"is_range":97,"range_type":60,"version_start":186,"version_start_type":99,"version_end":186,"version_end_type":99,"fixed_in":9},">= 8.0.1, \u003C= 8.0.1","8.0.1",{"version":188,"is_range":97,"range_type":60,"version_start":189,"version_start_type":99,"version_end":189,"version_end_type":99,"fixed_in":9},">= 8.0.0, \u003C= 8.0.0","8.0.0",{"version":191,"is_range":97,"range_type":60,"version_start":192,"version_start_type":99,"version_end":192,"version_end_type":99,"fixed_in":9},">= 7.88.1, \u003C= 7.88.1","7.88.1",{"version":194,"is_range":97,"range_type":60,"version_start":195,"version_start_type":99,"version_end":195,"version_end_type":99,"fixed_in":9},">= 7.88.0, \u003C= 7.88.0","7.88.0",{"version":197,"is_range":97,"range_type":60,"version_start":198,"version_start_type":99,"version_end":198,"version_end_type":99,"fixed_in":9},">= 7.87.0, \u003C= 7.87.0","7.87.0",{"version":200,"is_range":97,"range_type":60,"version_start":201,"version_start_type":99,"version_end":201,"version_end_type":99,"fixed_in":9},">= 7.86.0, \u003C= 7.86.0","7.86.0",{"version":203,"is_range":97,"range_type":60,"version_start":204,"version_start_type":99,"version_end":204,"version_end_type":99,"fixed_in":9},">= 7.85.0, \u003C= 7.85.0","7.85.0",{"version":206,"is_range":97,"range_type":60,"version_start":207,"version_start_type":99,"version_end":207,"version_end_type":99,"fixed_in":9},">= 7.84.0, \u003C= 7.84.0","7.84.0",{"version":209,"is_range":97,"range_type":60,"version_start":210,"version_start_type":99,"version_end":210,"version_end_type":99,"fixed_in":9},">= 7.83.1, \u003C= 7.83.1","7.83.1",{"version":212,"is_range":97,"range_type":60,"version_start":213,"version_start_type":99,"version_end":213,"version_end_type":99,"fixed_in":9},">= 7.83.0, \u003C= 7.83.0","7.83.0",{"version":215,"is_range":97,"range_type":60,"version_start":216,"version_start_type":99,"version_end":216,"version_end_type":99,"fixed_in":9},">= 7.82.0, \u003C= 7.82.0","7.82.0",{"version":218,"is_range":97,"range_type":60,"version_start":219,"version_start_type":99,"version_end":219,"version_end_type":99,"fixed_in":9},">= 7.81.0, \u003C= 7.81.0","7.81.0"]