Vulnerability index

Browse CVEs

3 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-13311 shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the … Shell Quote 1.9.0+ Fix from $1,9502026-06-25 CRITICAL 9.8 CVE-2021-42740 The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex desi… Shell Quote 1.7.3+ Fix from $2,3002021-10-21 CRITICAL 9.8 CVE-2016-10541 The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications that depend o… Shell Quote 1.6.1+ Fix from $2,3002018-05-31