EPSS
Percentile
81.3%
curlrequest is vulnerable to OS command injection. It is possible to inject and execute arbitrary OS commands via the URL parameter due to lack of validation and sanitization before passing the values to exec.
exec
github.com/advisories/GHSA-m8xj-5v73-3hh8
github.com/node-js-libs/curlrequest/blob/1.0.1/index.js#L339-L348
github.com/node-js-libs/curlrequest/blob/master/index.js#L239,