Skip to content
OpenAdvisories

Package · Debian

node-shell-quote

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-42740

    Improper Neutralization of Special Elements used in a Command in Shell-quote

    The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows drive letters. If the output of this package is passed to a real shell as a quoted arg…

    shell-quote node-shell-quote node-shell-quote Debian Ubuntu npm