Skip to content
OpenAdvisories

Package · PyPI

curl-cffi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.6
    CVE-2026-33752 Public exploit

    Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)

    curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to inter…

    lexiforest curl_cffi curl-cffi PyPI
  • High —
    GHSA-3vpc-4p9p-47hc

    curl_cffi bundles a version of libcurl affected by High Severity vulnerability

    ### Summary curl_cffi is potentially affected by High Severity vulnerability (CVE-2023-38545) in libcurl<8.4.0 ### Details HIGH severity vulnerability in curl and libcurl: [announcement](https://github.com/curl/curl/discussions/12026#discussioncomment-7195548…

    curl-cffi PyPI