A vulnerability classified as critical was found in cURL up to 8.17.0. Affected by this vulnerability is an unknown functionality of the component QUIC Certificate Handler. Such manipulation leads to improper certificate validation.

This vulnerability is listed as CVE-2025-13034. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.