Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Shell Quote
HIGH 7.5
CVE-2026-13311
shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the …
Fix: 1.9.0+
Fix from $1,950
2026-06-25
Shell Quote
CRITICAL 9.8
CVE-2021-42740
The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex desi…
Fix: 1.7.3+
Fix from $2,300
2021-10-21
Shell Quote
CRITICAL 9.8
CVE-2016-10541
The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications that depend o…
Fix: 1.6.1+
Fix from $2,300
2018-05-31