curl-cffi has 1 CVE on record. The median CVSS is 8.6 (high).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 8.6
Publish → KEV: —
Last 90 days: 0 prev 1

Products

curl-cffi 1

Follow curl-cffi:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-33752High· 8.6curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)59

curl-cffi vulnerabilities

CVEs affecting curl-cffi, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-33752High· 8.6PoC

curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

▾ Midnightcurl-cffi · curl-cffiEPSS 0.46%via OSV

curl-cffi vulnerabilities (CVEs) · VulnSea