curl: CVE-2025-5399: WebSocket endless loop
Discription

image
The function curl_ws_send() in libcurl contains an infinite loop that can be triggered by a malicious server under specific circumstances. The loop is caused by a condition in the code that is not properly handled, leading to the function failing to terminate. This vulnerability was discovered in the libcurl library on commit…Read More

Back to Main

Subscribe for the latest news: