Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kt4b-7ffh-4bch
Summary
When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey`
with the curl tool,curl should check the public key of the server certificate
to verify the peer.

This check was skipped in a certain condition that would then make curl allow
the connection without performing the proper check, thus not noticing a
possible impostor. To skip this check, the connection had to be done with QUIC
with ngtcp2 built to use GnuTLS and the user had to explicitly disable the
standard certificate verification.
Aliases
0
alias CVE-2025-13034
Fixed_packages
0
url pkg:apk/alpine/curl@0?arch=ppc64le&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=ppc64le&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=ppc64le&distroversion=edge&reponame=main
1
url pkg:apk/alpine/curl@0?arch=armv7&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=armv7&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=armv7&distroversion=edge&reponame=main
2
url pkg:apk/alpine/curl@0?arch=x86&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=x86&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=x86&distroversion=edge&reponame=main
3
url pkg:apk/alpine/curl@0?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=aarch64&distroversion=edge&reponame=main
4
url pkg:apk/alpine/curl@0?arch=armhf&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=armhf&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=armhf&distroversion=edge&reponame=main
5
url pkg:apk/alpine/curl@0?arch=x86_64&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=x86_64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=x86_64&distroversion=edge&reponame=main
6
url pkg:apk/alpine/curl@0?arch=riscv64&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=riscv64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=riscv64&distroversion=edge&reponame=main
7
url pkg:apk/alpine/curl@0?arch=s390x&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=s390x&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=s390x&distroversion=edge&reponame=main
8
url pkg:apk/alpine/curl@0?arch=loongarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/curl@0?arch=loongarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@0%3Farch=loongarch64&distroversion=edge&reponame=main
9
url pkg:deb/debian/curl@0?distro=trixie
purl pkg:deb/debian/curl@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@0%3Fdistro=trixie
10
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13?distro=trixie
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-2szj-xvgq-pkfr
2
vulnerability VCID-4e1k-7bj9-hfch
3
vulnerability VCID-4gze-cwtp-2bgr
4
vulnerability VCID-4seq-hvbx-7fg8
5
vulnerability VCID-56wg-yafz-gkgx
6
vulnerability VCID-6we4-n888-6qhe
7
vulnerability VCID-8zks-th64-33b8
8
vulnerability VCID-ddgz-rczw-jqfw
9
vulnerability VCID-etzn-uhck-h7b2
10
vulnerability VCID-mkyr-w79c-qqfz
11
vulnerability VCID-nvzd-v3bs-6qek
12
vulnerability VCID-pwn6-j8vf-rufk
13
vulnerability VCID-qbpd-star-6fgn
14
vulnerability VCID-qpux-jh6k-8qhx
15
vulnerability VCID-vbbv-k1r7-kkas
16
vulnerability VCID-x57x-w8g8-7ybz
17
vulnerability VCID-xpss-yndr-mycj
18
vulnerability VCID-yaas-j3qk-kfdg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13%3Fdistro=trixie
11
url pkg:deb/debian/curl@7.88.1-10%2Bdeb12u14?distro=trixie
purl pkg:deb/debian/curl@7.88.1-10%2Bdeb12u14?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-2szj-xvgq-pkfr
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-8zks-th64-33b8
5
vulnerability VCID-etzn-uhck-h7b2
6
vulnerability VCID-ksap-zrmb-ebcu
7
vulnerability VCID-mkyr-w79c-qqfz
8
vulnerability VCID-nvzd-v3bs-6qek
9
vulnerability VCID-qpux-jh6k-8qhx
10
vulnerability VCID-vbbv-k1r7-kkas
11
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.88.1-10%252Bdeb12u14%3Fdistro=trixie
12
url pkg:deb/debian/curl@8.18.0~rc2-1?distro=trixie
purl pkg:deb/debian/curl@8.18.0~rc2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.18.0~rc2-1%3Fdistro=trixie
13
url pkg:deb/debian/curl@8.18.0-2
purl pkg:deb/debian/curl@8.18.0-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.18.0-2
14
url pkg:deb/debian/curl@8.19.0-3?distro=trixie
purl pkg:deb/debian/curl@8.19.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.19.0-3%3Fdistro=trixie
15
url pkg:generic/curl.se/curl@8.18.0
purl pkg:generic/curl.se/curl@8.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-8zks-th64-33b8
2
vulnerability VCID-amgy-dw6h-6ydf
3
vulnerability VCID-etzn-uhck-h7b2
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.18.0
Affected_packages
0
url pkg:deb/debian/curl@8.14.1-2%2Bdeb13u2
purl pkg:deb/debian/curl@8.14.1-2%2Bdeb13u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-etzn-uhck-h7b2
5
vulnerability VCID-kt4b-7ffh-4bch
6
vulnerability VCID-mkyr-w79c-qqfz
7
vulnerability VCID-nvzd-v3bs-6qek
8
vulnerability VCID-qpux-jh6k-8qhx
9
vulnerability VCID-vbbv-k1r7-kkas
10
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.14.1-2%252Bdeb13u2
1
url pkg:deb/debian/curl@8.14.1-2%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/curl@8.14.1-2%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-etzn-uhck-h7b2
5
vulnerability VCID-kt4b-7ffh-4bch
6
vulnerability VCID-mkyr-w79c-qqfz
7
vulnerability VCID-nvzd-v3bs-6qek
8
vulnerability VCID-qpux-jh6k-8qhx
9
vulnerability VCID-vbbv-k1r7-kkas
10
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@8.14.1-2%252Bdeb13u2%3Fdistro=trixie
2
url pkg:generic/curl.se/curl@8.8.0
purl pkg:generic/curl.se/curl@8.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-75nw-4e2d-zqgg
5
vulnerability VCID-8m6a-ej6a-g3df
6
vulnerability VCID-8zks-th64-33b8
7
vulnerability VCID-9mjz-apkm-g7h1
8
vulnerability VCID-etzn-uhck-h7b2
9
vulnerability VCID-hrsy-694u-2fec
10
vulnerability VCID-kt4b-7ffh-4bch
11
vulnerability VCID-mkyr-w79c-qqfz
12
vulnerability VCID-my7a-jeng-5bhw
13
vulnerability VCID-nvzd-v3bs-6qek
14
vulnerability VCID-pwn6-j8vf-rufk
15
vulnerability VCID-qpux-jh6k-8qhx
16
vulnerability VCID-t9p4-2x7v-yfaq
17
vulnerability VCID-vbbv-k1r7-kkas
18
vulnerability VCID-wgma-bycg-1qb1
19
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.8.0
3
url pkg:generic/curl.se/curl@8.9.0
purl pkg:generic/curl.se/curl@8.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-75nw-4e2d-zqgg
5
vulnerability VCID-8zks-th64-33b8
6
vulnerability VCID-9mjz-apkm-g7h1
7
vulnerability VCID-etzn-uhck-h7b2
8
vulnerability VCID-hrsy-694u-2fec
9
vulnerability VCID-kt4b-7ffh-4bch
10
vulnerability VCID-mkyr-w79c-qqfz
11
vulnerability VCID-nvzd-v3bs-6qek
12
vulnerability VCID-pwn6-j8vf-rufk
13
vulnerability VCID-qpux-jh6k-8qhx
14
vulnerability VCID-t9p4-2x7v-yfaq
15
vulnerability VCID-vbbv-k1r7-kkas
16
vulnerability VCID-wgma-bycg-1qb1
17
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.9.0
4
url pkg:generic/curl.se/curl@8.9.1
purl pkg:generic/curl.se/curl@8.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-8zks-th64-33b8
5
vulnerability VCID-9mjz-apkm-g7h1
6
vulnerability VCID-etzn-uhck-h7b2
7
vulnerability VCID-hrsy-694u-2fec
8
vulnerability VCID-kt4b-7ffh-4bch
9
vulnerability VCID-mkyr-w79c-qqfz
10
vulnerability VCID-nvzd-v3bs-6qek
11
vulnerability VCID-pwn6-j8vf-rufk
12
vulnerability VCID-qpux-jh6k-8qhx
13
vulnerability VCID-t9p4-2x7v-yfaq
14
vulnerability VCID-vbbv-k1r7-kkas
15
vulnerability VCID-wgma-bycg-1qb1
16
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.9.1
5
url pkg:generic/curl.se/curl@8.10.0
purl pkg:generic/curl.se/curl@8.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-8zks-th64-33b8
5
vulnerability VCID-9mjz-apkm-g7h1
6
vulnerability VCID-etzn-uhck-h7b2
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-mkyr-w79c-qqfz
9
vulnerability VCID-nvzd-v3bs-6qek
10
vulnerability VCID-pwn6-j8vf-rufk
11
vulnerability VCID-qpux-jh6k-8qhx
12
vulnerability VCID-t9p4-2x7v-yfaq
13
vulnerability VCID-vbbv-k1r7-kkas
14
vulnerability VCID-wgma-bycg-1qb1
15
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.10.0
6
url pkg:generic/curl.se/curl@8.10.1
purl pkg:generic/curl.se/curl@8.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-8zks-th64-33b8
5
vulnerability VCID-9mjz-apkm-g7h1
6
vulnerability VCID-etzn-uhck-h7b2
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-mkyr-w79c-qqfz
9
vulnerability VCID-nvzd-v3bs-6qek
10
vulnerability VCID-pwn6-j8vf-rufk
11
vulnerability VCID-qpux-jh6k-8qhx
12
vulnerability VCID-t9p4-2x7v-yfaq
13
vulnerability VCID-vbbv-k1r7-kkas
14
vulnerability VCID-wgma-bycg-1qb1
15
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.10.1
7
url pkg:generic/curl.se/curl@8.11.0
purl pkg:generic/curl.se/curl@8.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-6we4-n888-6qhe
4
vulnerability VCID-8zks-th64-33b8
5
vulnerability VCID-9mjz-apkm-g7h1
6
vulnerability VCID-etzn-uhck-h7b2
7
vulnerability VCID-ksap-zrmb-ebcu
8
vulnerability VCID-kt4b-7ffh-4bch
9
vulnerability VCID-mkyr-w79c-qqfz
10
vulnerability VCID-nvzd-v3bs-6qek
11
vulnerability VCID-qpux-jh6k-8qhx
12
vulnerability VCID-t9p4-2x7v-yfaq
13
vulnerability VCID-vbbv-k1r7-kkas
14
vulnerability VCID-wgma-bycg-1qb1
15
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.11.0
8
url pkg:generic/curl.se/curl@8.11.1
purl pkg:generic/curl.se/curl@8.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-26p8-15d6-kbb1
2
vulnerability VCID-2cx5-1qnw-uufj
3
vulnerability VCID-5xp7-mcsa-uqd4
4
vulnerability VCID-6we4-n888-6qhe
5
vulnerability VCID-8zks-th64-33b8
6
vulnerability VCID-9mjz-apkm-g7h1
7
vulnerability VCID-etzn-uhck-h7b2
8
vulnerability VCID-ksap-zrmb-ebcu
9
vulnerability VCID-kt4b-7ffh-4bch
10
vulnerability VCID-mkyr-w79c-qqfz
11
vulnerability VCID-nvzd-v3bs-6qek
12
vulnerability VCID-qpux-jh6k-8qhx
13
vulnerability VCID-t9p4-2x7v-yfaq
14
vulnerability VCID-vbbv-k1r7-kkas
15
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.11.1
9
url pkg:generic/curl.se/curl@8.12.0
purl pkg:generic/curl.se/curl@8.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-8zks-th64-33b8
4
vulnerability VCID-9mjz-apkm-g7h1
5
vulnerability VCID-etzn-uhck-h7b2
6
vulnerability VCID-ksap-zrmb-ebcu
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-mkyr-w79c-qqfz
9
vulnerability VCID-nvzd-v3bs-6qek
10
vulnerability VCID-qpux-jh6k-8qhx
11
vulnerability VCID-vbbv-k1r7-kkas
12
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.12.0
10
url pkg:generic/curl.se/curl@8.12.1
purl pkg:generic/curl.se/curl@8.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-8zks-th64-33b8
4
vulnerability VCID-9mjz-apkm-g7h1
5
vulnerability VCID-etzn-uhck-h7b2
6
vulnerability VCID-ksap-zrmb-ebcu
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-mkyr-w79c-qqfz
9
vulnerability VCID-nvzd-v3bs-6qek
10
vulnerability VCID-qpux-jh6k-8qhx
11
vulnerability VCID-vbbv-k1r7-kkas
12
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.12.1
11
url pkg:generic/curl.se/curl@8.13.0
purl pkg:generic/curl.se/curl@8.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-176a-agbw-hqdy
1
vulnerability VCID-2cx5-1qnw-uufj
2
vulnerability VCID-5xp7-mcsa-uqd4
3
vulnerability VCID-8zks-th64-33b8
4
vulnerability VCID-9mjz-apkm-g7h1
5
vulnerability VCID-amgy-dw6h-6ydf
6
vulnerability VCID-aua9-4frt-xugf
7
vulnerability VCID-etzn-uhck-h7b2
8
vulnerability VCID-ksap-zrmb-ebcu
9
vulnerability VCID-kt4b-7ffh-4bch
10
vulnerability VCID-m5fs-um7r-9qh2
11
vulnerability VCID-mkyr-w79c-qqfz
12
vulnerability VCID-nvzd-v3bs-6qek
13
vulnerability VCID-qpux-jh6k-8qhx
14
vulnerability VCID-vbbv-k1r7-kkas
15
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.13.0
12
url pkg:generic/curl.se/curl@8.14.0
purl pkg:generic/curl.se/curl@8.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-aua9-4frt-xugf
5
vulnerability VCID-etzn-uhck-h7b2
6
vulnerability VCID-ksap-zrmb-ebcu
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-m5fs-um7r-9qh2
9
vulnerability VCID-mkyr-w79c-qqfz
10
vulnerability VCID-nvzd-v3bs-6qek
11
vulnerability VCID-qpux-jh6k-8qhx
12
vulnerability VCID-vbbv-k1r7-kkas
13
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.14.0
13
url pkg:generic/curl.se/curl@8.14.1
purl pkg:generic/curl.se/curl@8.14.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-aua9-4frt-xugf
5
vulnerability VCID-etzn-uhck-h7b2
6
vulnerability VCID-ksap-zrmb-ebcu
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-mkyr-w79c-qqfz
9
vulnerability VCID-nvzd-v3bs-6qek
10
vulnerability VCID-qpux-jh6k-8qhx
11
vulnerability VCID-vbbv-k1r7-kkas
12
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.14.1
14
url pkg:generic/curl.se/curl@8.15.0
purl pkg:generic/curl.se/curl@8.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-aua9-4frt-xugf
5
vulnerability VCID-etzn-uhck-h7b2
6
vulnerability VCID-ksap-zrmb-ebcu
7
vulnerability VCID-kt4b-7ffh-4bch
8
vulnerability VCID-mkyr-w79c-qqfz
9
vulnerability VCID-nvzd-v3bs-6qek
10
vulnerability VCID-qpux-jh6k-8qhx
11
vulnerability VCID-vbbv-k1r7-kkas
12
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.15.0
15
url pkg:generic/curl.se/curl@8.16.0
purl pkg:generic/curl.se/curl@8.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-etzn-uhck-h7b2
5
vulnerability VCID-kt4b-7ffh-4bch
6
vulnerability VCID-mkyr-w79c-qqfz
7
vulnerability VCID-nvzd-v3bs-6qek
8
vulnerability VCID-qpux-jh6k-8qhx
9
vulnerability VCID-vbbv-k1r7-kkas
10
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.16.0
16
url pkg:generic/curl.se/curl@8.17.0
purl pkg:generic/curl.se/curl@8.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2cx5-1qnw-uufj
1
vulnerability VCID-5xp7-mcsa-uqd4
2
vulnerability VCID-8zks-th64-33b8
3
vulnerability VCID-amgy-dw6h-6ydf
4
vulnerability VCID-etzn-uhck-h7b2
5
vulnerability VCID-kt4b-7ffh-4bch
6
vulnerability VCID-mkyr-w79c-qqfz
7
vulnerability VCID-nvzd-v3bs-6qek
8
vulnerability VCID-vbbv-k1r7-kkas
9
vulnerability VCID-x57x-w8g8-7ybz
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.17.0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13034.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13034.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-13034
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01204
published_at 2026-04-02T12:55:00Z
1
value 0.00011
scoring_system epss
scoring_elements 0.012
published_at 2026-04-16T12:55:00Z
2
value 0.00011
scoring_system epss
scoring_elements 0.0122
published_at 2026-04-07T12:55:00Z
3
value 0.00011
scoring_system epss
scoring_elements 0.01226
published_at 2026-04-08T12:55:00Z
4
value 0.00011
scoring_system epss
scoring_elements 0.0123
published_at 2026-04-09T12:55:00Z
5
value 0.00011
scoring_system epss
scoring_elements 0.01213
published_at 2026-04-11T12:55:00Z
6
value 0.00011
scoring_system epss
scoring_elements 0.01207
published_at 2026-04-12T12:55:00Z
7
value 0.00011
scoring_system epss
scoring_elements 0.01209
published_at 2026-04-13T12:55:00Z
8
value 0.00011
scoring_system epss
scoring_elements 0.01211
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-13034
2
reference_url https://curl.se/docs/CVE-2025-13034.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-08T14:56:11Z/
url https://curl.se/docs/CVE-2025-13034.html
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2426406
reference_id 2426406
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2426406
5
reference_url https://curl.se/docs/CVE-2025-13034.json
reference_id CVE-2025-13034.json
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-08T14:56:11Z/
url https://curl.se/docs/CVE-2025-13034.json
6
reference_url https://usn.ubuntu.com/8062-1/
reference_id USN-8062-1
reference_type
scores
url https://usn.ubuntu.com/8062-1/
Weaknesses
0
cwe_id 295
name Improper Certificate Validation
description The product does not validate, or incorrectly validates, a certificate.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.1
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kt4b-7ffh-4bch