shell-quote vulnerabilities (npm)
5 vulnerabilities.
-
shell-quotenpm shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token 9.2 Critical -
shell-quotenpm shell-quote parse() is quadratic in token count, enabling denial of service 8.7 High -
shell-quotenpm shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op` 9.2 Critical -
shell-quotenpm Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
shell-quotenpm Potential Command Injection in shell-quote 9.8 Critical