Skip to content
OpenAdvisories

Vendor

lexiforest

1 known vulnerabilities.

Products

curl_cffi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-33752 Public exploit

    Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)

    curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to inter…

    lexiforest curl_cffi curl-cffi PyPI