CVE-2025-5399

The libcurl package is affected by a vulnerability in its WebSocket code . A malicious server can transmit a specially crafted packet that forces libcurl into an endless busy-loop , from which the application cannot escape without killing the thread or process. This condition can be leveraged to ...