@rootio/shell-quote vulnerabilities (Root)
4 vulnerabilities.
-
@rootio/shell-quoteRoot shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token 9.2 Critical -
@rootio/shell-quoteRoot shell-quote parse() is quadratic in token count, enabling denial of service 8.7 High -
@rootio/shell-quoteRoot shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op` 9.2 Critical -
@rootio/shell-quoteRoot Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical