curl-cffi vulnerabilities (PyPI)

2 vulnerabilities.

• curl-cffi PyPI Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass) CVE-2026-33752 Public exploitFix available 8.6 HighApril 3, 2026
• curl-cffi PyPI curl_cffi bundles a version of libcurl affected by High Severity vulnerability GHSA-3vpc-4p9p-47hc Fix available No scoreOctober 22, 2024