Question: What is CVE-2025-0167?
Answer: CVE-2025-0167 is a vulnerability classified as low with a CVSS score of 3.4. It falls under nan and affects the system as follows: When asked to use a `.netrc` file for credentials **and** to follow HTTP
redirects, curl could leak the password used for the first host to the
followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has a `default` entry that
omits both login and password. A rare circumstance.