Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/libcurl@8.1.2
purl pkg:conan/libcurl@8.1.2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 2.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3h9c-dfvd-g3a4
Aliases:
CVE-2023-32001
Time-of-check Time-of-use (TOCTOU) Race Condition libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called `stat()` followed by `fopen()` in a way that made it vulnerable to a TOCTOU race condition problem. By exploiting this flaw, an attacker could trick the victim to create or overwrite protected files holding this data in ways it was not intended to.
8.2.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:51:37.456502+00:00 GitLab Importer Affected by VCID-3h9c-dfvd-g3a4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libcurl/CVE-2023-32001.yml 38.0.0