pkg:npm/shell-quote

All known vulnerabilities

• CRITICAL9.8CVE-2021-42740Improper Neutralization of Special Elements used in a Command in Shell-quote
  >= 1.6.3, < 1.7.3
• CRITICAL9.8CVE-2016-10541Potential Command Injection in shell-quote
  from 0, < 1.6.1
• HIGH8.1CVE-2026-9277shell-quote quote() does not escape newlines in object .op values
  >= 1.1.0, < 1.8.4
• HIGH7.5shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)
  from 0, < 1.9.0