Vulnerabilities for curl-cffi

First version without a known vulnerability: 0.15.0

Details

• GHSA-qw2m-4pqf-rmpp2026-04-03

  curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

  Fixed in: 0.15.0

• GHSA-3vpc-4p9p-47hc2024-10-22

  curl_cffi bundles a version of libcurl affected by High Severity vulnerability

  Fixed in: 0.7.0b6