Read the docs

Curling Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Curling Project records in CISA KEV

No Curling Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2019-08054 CVE-2019-10789 · GHSA-xmxh-g7wj-8m4m

OS command injection in curling.js

Priority MEDIUM 50

All versions of curling.js are vulnerable to Command Injection via the run function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04872 Published 2020-02-06 Fixed in 1.1.0 CWE-78
Open these records in search →