GHSA-3vpc-4p9p-47hc: curl_cffi bundles a version of libcurl affected by High Severity vulnerability

October 22, 2024

curl_cffi is potentially affected by High Severity vulnerability (CVE-2023-38545) in libcurl<8.4.0

References

github.com/advisories/GHSA-3vpc-4p9p-47hc
github.com/advisories/GHSA-7xw9-w465-6x42
github.com/lexiforest/curl_cffi
github.com/lexiforest/curl_cffi/security/advisories/GHSA-3vpc-4p9p-47hc

Code Behaviors & Features

Detect and mitigate GHSA-3vpc-4p9p-47hc with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →