Security Issue

Question

Security Issue

Opened this issue 4 years ago · 1 comments

I am using curlrequest in one of my tools and GitHub marks it as security issue:

high severity
Vulnerable versions: <= 1.0.1
Patched version: No fix
curlrequest through 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands by using a semicolon char in any of the options values.

Code: CVE-2020-7646

Any way to fix this?

Answer 1 · 2021-02-27T17:32:17.000Z

I have encountered the same issue.

GitHub has highlighted a specific line that triggered this security flag.

Here's hoping @chriso or someone else can fix it!