HIGH7.5npm
GHSA-395f-4hp3-45gv· CVE-2026-13311shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)
Modified: 9/10/2026
package
npm/shell-quote
pkg:npm/shell-quote
CRITICAL9.8npm
GHSA-g4rg-993r-mgx7· CVE-2021-42740Improper Neutralization of Special Elements used in a Command in Shell-quote
Modified: 9/10/2026
CRITICAL9.8npm
GHSA-qg8p-v9q4-gh34· CVE-2016-10541Potential Command Injection in shell-quote
Modified: 9/10/2026
HIGH8.1npm
GHSA-w7jw-789q-3m8p· CVE-2026-9277shell-quote quote() does not escape newlines in object .op values
Modified: 9/10/2026