{"uuid": "905cd15b-45ca-4b45-a8b0-bd52979edcbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5399", "type": "seen", "source": "https://t.me/hackeronereports/296", "content": "\ud83c\udfaf New Report #3168039: CVE-2025-5399: WebSocket endless loop\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: curl\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-05-30\n\u23f0 Disclosed: 2025-06-04 05:57:17\n\ud83d\udcdd Summary: The function curl ws send() in libcurl contains an infinite loop that can be triggered by a malicious server under specific circumstances. The loop is caused by a condition in the code that is not properly handled, leading to the function failing to terminate. This vulnerability was discovered in the libcurl library on commit 12d13b84fa40aa657b83d5458944dbd9b978fb7e.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.542401Z"}