Approved changes feed: RSS · Atom

cpe:2.3:a:haxx:libcurl:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorHaxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41)
ProductLibcurl (3b3523ef-9710-50bf-8391-80ac7eb566e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:curl/libcurl purl2cpe 2026-06-01 10:12:18.984517
pkg:deb/debian/curl purl2cpe 2026-06-01 10:12:18.984519
pkg:deb/ubuntu/curl purl2cpe 2026-06-01 10:12:18.984520
pkg:github/curl/curl purl2cpe 2026-06-01 10:12:18.984522
pkg:rpm/fedora/curl purl2cpe 2026-06-01 10:12:18.984523
pkg:rpm/opensuse/curl purl2cpe 2026-06-01 10:12:18.984524

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32928 vulnerable 2026-06-08 06:37:24.707371 Details available
The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through.
Published: 2024-08-19T16:38:01.140Z
Updated: 2025-03-14T15:47:28.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.