VYPR
Vendor

Curling Project

Products
1
CVEs
1
Across products
1
Status
Private

Products

1

Recent CVEs

1
  • CVE-2019-10789CriFeb 6, 2020
    risk 0.64cvss 9.8epss 0.05

    All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.