search

node-js-libs / curlrequest

A cURL wrapper
MIT License
184 stars 44 forks source link

Security Issue #73

Open jonasW3F opened 3 years ago

jonasW3F commented 3 years ago

I am using curlrequest in one of my tools and GitHub marks it as security issue:

high severity Vulnerable versions: <= 1.0.1 Patched version: No fix curlrequest through 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands by using a semicolon char in any of the options values.

Code: CVE-2020-7646

Any way to fix this?

HaydenMacDonald commented 3 years ago

I have encountered the same issue.

GitHub has highlighted a specific line that triggered this security flag.

Here's hoping @chriso or someone else can fix it!