Approved changes feed: RSS · Atom

cpe:2.3:a:haxx:curl:7.6.1:*:*:*:*:*:*:*

part: a version: 7.6.1 update: *

VendorHaxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41)
ProductCurl (2d1ca0dd-2ad5-581e-9bc3-c802b3d3d143)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/curl purl2cpe 2026-06-01 10:12:19.109558
pkg:deb/ubuntu/curl purl2cpe 2026-06-01 10:12:19.109559
pkg:github/curl/curl purl2cpe 2026-06-01 10:12:19.109560
pkg:rpm/fedora/curl purl2cpe 2026-06-01 10:12:19.109562
pkg:rpm/opensuse/curl purl2cpe 2026-06-01 10:12:19.109563

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1944 vulnerable 2026-06-08 05:03:57.448549 Details available
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Published: 2013-04-29T22:00:00.000Z
Updated: 2024-08-06T15:20:37.296Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.