shell-quote
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 5 advisory(ies) without a verdict
Advisories (5)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-395f-4hp3-45gv shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407) | < 1.9.0 | Undetermined |
| GHSA-g4rg-993r-mgx7 Improper Neutralization of Special Elements used in a Command in Shell-quote | 1.6.3 – < 1.7.3 | Undetermined |
| GHSA-pqg4-j6r4-53mv shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token | 1.8.4 – < 1.11.0 | Undetermined |
| GHSA-qg8p-v9q4-gh34 Potential Command Injection in shell-quote | < 1.6.1 | Undetermined |
| GHSA-w7jw-789q-3m8p shell-quote quote() does not escape newlines in object .op values | 1.1.0 – < 1.8.4 | Undetermined |
Sources
| Source | Licence |
|---|