Skip to content
OpenAdvisories

Product · HackerOne

shell-quote node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2016-10541

    Potential Command Injection in shell-quote

    The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications that depend on shell-quote may also be vulnerable. A malicious user could perform code injection.

    HackerOne shell-quote node module shell-quote npm