CVE-2020-28425

This affects all versions of package curljs.