VDB
JLSEC-2025-27
JLSEC-2025-27
PUBLISHED
CVSS 4.300000190734863 MEDIUM
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | LibCURL_jll | 0, 0 |
| Julia | LibCURL_jll | 0 |
Timeline
- Oct 10, 2025 CVE Published
- Jul 23, 2026 CVE Updated
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf url
- https://curl.se/docs/CVE-2021-22890.html url
- https://hackerone.com/reports/1129529 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/ url
- https://security.gentoo.org/glsa/202105-36 url
- https://security.netapp.com/advisory/ntap-20210521-0007/ url
- https://www.oracle.com//security-alerts/cpujul2021.html url