HIGH8.6PyPI
PYSEC-2026-2431· CVE-2026-33752, GHSA-qw2m-4pqf-rmppcurl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)
Modified: 7/13/2026
package
pkg:pypi/curl-cffi
curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)
Modified: 7/13/2026
curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Modified: 12/2/2024
curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)
Modified: 7/13/2026