Security issue - possible MITM attack

Hello,
I noticed that for curl connection is disabled option CURLOPT_SSL_VERIFYHOST. It could make a possibility of man-in-the-man attack because curl does not verify server's certificate.

I have enabled this option and created dependency on Kdyby\CaCurl which provides CA certificate from mozzila.org with autoupdate command.