Vulnerabilities > Shell Quote Project

DATE CVE VULNERABILITY TITLE RISK
2021-10-21 CVE-2021-42740 Command Injection vulnerability in Shell-Quote Project Shell-Quote
The shell-quote package before 1.7.3 for Node.js allows command injection.
network
low complexity
shell-quote-project CWE-77
critical
9.8
2018-05-31 CVE-2016-10541 Code Injection vulnerability in Shell-Quote Project Shell-Quote
The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell.
network
low complexity
shell-quote-project CWE-94
critical
9.8