node-shell-quote vulnerabilities (Debian)
4 vulnerabilities.
-
node-shell-quoteDebian shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token 9.2 Critical -
node-shell-quoteDebian shell-quote parse() is quadratic in token count, enabling denial of service 8.7 High -
node-shell-quoteDebian shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op` 9.2 Critical -
node-shell-quoteDebian Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical