Approved changes feed: RSS · Atom

cpe:2.3:a:haxx:curl:8.11.1:*:*:*:*:*:*:*

part: a version: 8.11.1 update: *

VendorHaxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41)
ProductCurl (2d1ca0dd-2ad5-581e-9bc3-c802b3d3d143)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/curl purl2cpe 2026-06-01 10:12:19.109970
pkg:deb/ubuntu/curl purl2cpe 2026-06-01 10:12:19.109971
pkg:github/curl/curl purl2cpe 2026-06-01 10:12:19.109973
pkg:rpm/fedora/curl purl2cpe 2026-06-01 10:12:19.109974
pkg:rpm/opensuse/curl purl2cpe 2026-06-01 10:12:19.109975

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0665 vulnerable 2026-06-08 07:02:25.117197 eventfd double close
libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
Published: 2025-02-05T09:16:49.038Z
Updated: 2026-03-17T17:42:06.679Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.