Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/libcurl@7.22.0
purl pkg:conan/libcurl@7.22.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 2.6
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ms2r-94ph-yyh3
Aliases:
CVE-2023-27536
Improper Authentication An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
8.0.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:51:05.003783+00:00 GitLab Importer Affected by VCID-ms2r-94ph-yyh3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libcurl/CVE-2023-27536.yml 38.0.0