Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool, curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper check, thus not noticing a possible impostor. To skip this check, the connection had to be done with QUIC with ngtcp2 built to use GnuTLS and the user had to explicitly disable the standard certificate verification.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-19 | 1 | Disclosure1 |
| 2026-03-13 | 1 | Patch1 |
| 2026-03-14 | 1 | Patch1 |
| 2026-03-15 | 1 | Patch1 |
🔍 Lambda Watchdog detected that CVE-2025-13034 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/408 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
Lambda Watchdog reports that CVE‑2025‑13034 is no longer present in the latest AWS Lambda base image scans, indicating AWS has addressed the issue, but no additional patch details or PoC are offered.
🔍 Lambda Watchdog detected that CVE-2025-13034 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/408 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
Lambda Watchdog has identified that CVE‑2025‑13034 is no longer present in the latest AWS Lambda base images, indicating the vulnerability has effectively been mitigated through image updates.
🔍 Lambda Watchdog detected that CVE-2025-13034 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/408 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
Lambda Watchdog reports that CVE-2025-13034 is no longer present in the latest AWS Lambda base image scans, indicating the vulnerability has been patched or removed.
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2025-13034 impacts curl-minimal in 40 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/408 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
Post summary
A new medium‑severity CVE, CVE‑2025‑13034, affecting curl‑minimal in 40 AWS Lambda base images has been detected, with links to an issue page and additional information. No PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | haxx | curl | - | - | - |