VYPR

Curling

by Curling Project

CVEs (1)

  • CVE-2019-10789CriFeb 6, 2020
    risk 0.64cvss 9.8epss 0.05

    All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.