Search for packages
| purl | pkg:npm/curlrequest@0.3.9 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-rp3r-94dw-bkfs
Aliases: CVE-2020-7646 GHSA-m8xj-5v73-3hh8 |
OS Command Injection curlrequest allows reading any file by populating the file parameter with user input. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:30:05.825370+00:00 | GitLab Importer | Affected by | VCID-rp3r-94dw-bkfs | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/curlrequest/CVE-2020-7646.yml | 38.6.0 |