Security issue with curlrequest

[HaydenMacDonald]

Hi there,

Great work with this library! An issue I've had while using beeminderjs is that GitHub flags curlrequest as a security issue.

CVE-2020-7646 [high severity]
Vulnerable versions: <= 1.0.1
Patched version: No fix
curlrequest through 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands by using a semicolon char in any of the options values.

Is there a way for curlrequest to be replaced as a dependency, as there seems to be no dedicated owner of curlrequest and it hasn't been updated in years?

Thanks!

[HaydenMacDonald]

@malcolmocean Any thoughts around how this issue can be solved? Thanks!