CVE-2025-4947

The libcurl library (and the curl package) is vulnerable to a security issue where it accidentally skips certificate verification for QUIC connections when the host is specified as an IP address in the URL. This flaw prevents the detection of impostor attacks or man-in-the-middle (MITM) attacks. ...