GitHub Advisoryadvisory · PyPI

GHSA-3vpc-4p9p-47hc curl_cffi bundles a version of libcurl affected by High Severity vulnerability

HIGH Published 2024-10-22 Modified 2024-10-22 Official page ↗

Ecosystem: PyPI
Packages: curl-cffi
Severity: High
Weaknesses: CWE-1395
Reviewed: 2024-10-22

Affected packages

• PyPI curl-cffi: < 0.7.0b6 → fixed in 0.7.0b6

Description

Summary curl_cffi is potentially affected by High Severity vulnerability (CVE-2023-38545) in libcurl=8.5`, which is not affected by this issue.

Related

Weakness · CWE (1)

CWE-1395 Dependency on Vulnerable Third-Party Component weakness

References