Approved changes feed: RSS · Atom

cpe:2.3:a:haxx:curl:7.6:*:*:*:*:*:*:*

part: a version: 7.6 update: *

VendorHaxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41)
ProductCurl (2d1ca0dd-2ad5-581e-9bc3-c802b3d3d143)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/curl purl2cpe 2026-06-01 10:12:19.109544
pkg:deb/ubuntu/curl purl2cpe 2026-06-01 10:12:19.109546
pkg:github/curl/curl purl2cpe 2026-06-01 10:12:19.109547
pkg:rpm/fedora/curl purl2cpe 2026-06-01 10:12:19.109548
pkg:rpm/opensuse/curl purl2cpe 2026-06-01 10:12:19.109550

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1944 vulnerable 2026-06-08 05:03:57.447988 Details available
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Published: 2013-04-29T22:00:00.000Z
Updated: 2024-08-06T15:20:37.296Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.