npm/curlrequest CVE-2020-7646: critical 9.8, EPSS 1.93%
curlrequest allows execution of arbitrary commands
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m8xj-5v73-3hh8
- https://nvd.nist.gov/vuln/detail/CVE-2020-7646
- https://github.com/node-js-libs/curlrequest
- https://github.com/node-js-libs/curlrequest/blob/master/index.js#L239
- https://snyk.io/vuln/SNYK-JS-CURLREQUEST-568274
CVE-2020-7646 · published · modified · JSON