shell-quote vulnerabilities (TuxCare)
5 vulnerabilities.
-
shell-quoteTuxCare shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token 9.2 Critical -
shell-quoteTuxCare shell-quote parse() is quadratic in token count, enabling denial of service 8.7 High -
shell-quoteTuxCare shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op` 9.2 Critical -
shell-quoteTuxCare Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
shell-quoteTuxCare Potential Command Injection in shell-quote 9.8 Critical