EPSS
Percentile
81.3%
curlrequest is vulnerable to command injection vulnerability. When making a request with CURL command, a user can pass any malicious commands by using a ; (semicolon character) in any of the options parameters.
CURL
;
options
github.com/node-js-libs/curlrequest/blob/master/index.js#L232
github.com/node-js-libs/curlrequest/blob/master/index.js#L239,