CVE-2020-7646

CVE-2020-7646 affects the curlrequest npm package up to version 1.0.1. The vulnerability arises from the file parameter being populated with user input, enabling reading of arbitrary files. NVD/NVD-derived metrics indicate a high to critical impact (CVSSv2 base score 7.5; CVSSv3.1 base score 9.8)...