undetected-httpx

undetected-httpx undetected-httpx is a multi-purpose HTTP probing toolkit inspired by httpx. It is specifically engineered to bypass modern anti-bot infrastructures by mimicking real-world browser signatures. Traditional HTTP clients are easily fingerprinted and blocked by WAFs. This tool leverag...

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752（基于重定向的 SSRF，可导致 curlcffi 访问内部网络） 摘要 curlcffi 未限制对内部 IP 范围的请求，并会通过底层 libcurl 自动跟随重定向。 因此，攻击者可控的 URL 可以将请求重定向到云元数据端点等内部服务。此外，curlcffi 的 TLS 模拟功能可使这些请求看起来像合法的浏览器流量，从而可能绕过某些网络控制。 详情 该问题源于 curlcffi 处理出站请求的方式 用户提供的 URL 直接传递给 libcurl，未检查其是否解析到内部 IP 范围（例如...

PYSEC-2026-2431 curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

Summary curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata endpoints. In addition, curlcffi’s TLS impersonation...

CVE-2026-33752

curlcffi is the a Python binding for curl. Prior to 0.15.0, curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata...

CVE-2026-33752 Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)

curlcffi is the a Python binding for curl. Prior to 0.15.0, curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata...

curl_cffi bundles a version of libcurl affected by High Severity vulnerability

Summary curlcffi is potentially affected by High Severity vulnerability CVE-2023-38545 in libcurl=8.5, which is not affected by this issue...

GHSA-3VPC-4P9P-47HC curl_cffi bundles a version of libcurl affected by High Severity vulnerability

Summary curlcffi is potentially affected by High Severity vulnerability CVE-2023-38545 in libcurl=8.5, which is not affected by this issue...