HOMEVULNERABILITIESVENDORSCurling Project

Curling ProjectCVEs & Vulnerabilities

1 CVEs affecting Curling Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

curling 1
CVE-2019-10789CRITICAL

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.

6 Feb 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Curling Project CVEs & Vulnerabilities — 1 Tracked