SecurityLobstersabout 3 hours ago
curl: a CVE dispute
1 min read
The curl project rejected a CVE request for a wildcard certificate hostname-check bug, calling it lower than LOW severity. The reporter escalated to MITRE, which ruled on June 24 that the issue is not a security vulnerability. The bug was fixed December 8, 2025.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
