DEBIAN-CVE-2026-102422

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

UBUNTU-CVE-2026-102422

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

@ache-lol/cli (>=0.1.97, <=0.1.99), @ada-mcp/mcp-server (>=0.1.0, <=0.1.1) +189 more potentially affected by CVE-2026-102422 via shell-quote (>=1.8.4, <=1.10.0)

shell-quote NPM version =1.8.4, =0.1.97, =0.1.0, =0.1.0, =0.0.13, =14.0.13, =10.0.0-rc.2, =3.0.0-beta.0, =1.0.0, =2.0.0-rc.1, =6.0.4, =4.0.0-rc.1, =1.0.0-beta.0, =4.0.0-rc.1, =1.0.0, =1.0.15 and more Source cves: CVE-2026-102422 Source advisory: MEND:CVE-2026-102422...

CVE-2026-102422 shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-102422

shell-quote's "quote" function emits a " comment " token as "" followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the...

CVE-2026-102422

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-102422 shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-102422 shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-102422

The shell-quote library is vulnerable to command injection due to how the quote() function handles { comment } tokens. When a comment token is emitted as #, it comments out the rest of the shell line, potentially neutralizing the opening quote of subsequent string tokens. If a later string contai...

CLEANSTART-2026-XS33213 shell-quote prior to 1

Security vulnerability affects the argo-workflows package. shell-quote prior to 1...

CLEANSTART-2026-JC29454 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`

Security vulnerability affects the argo-workflows package. shell-quote's quote function did not validate object-token inputs against the operator model used by parse...

PT-2026-102608

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

PT-2026-102778

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

PT-2026-102812

Name of the Vulnerable Software and Affected Versions simple-git versions 3.15.0 through 4.0.0 Description The default blockUnsafeOperationsPlugin fails to classify trailer..cmd as an unsafe configuration. This allows an attacker to execute arbitrary shell commands with the operating-system...

PT-2026-102445

Name of the Vulnerable Software and Affected Versions shell-quote versions prior to 1.11.0 Description The quote function emits a comment token starting with , which comments out the remainder of the shell line, including opening quotes of subsequent string tokens. If a subsequent string contains...

Important: environment-modules

Issue Overview: modulecomgenwordsandfiles fed untrusted text module names read off disk, LOADEDMODULES, MODULEPATH straight into compgen -W, which performs a full unquoted-word expansion on its wordlist -- including command substitution -- as a normal, documented part of its behavior. A module...

CVE-2026-102422: Improper Neutralization of Special Elements used in an OS Command

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-82804: Improper Neutralization of Special Elements used in an OS Command

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-102809: Memory Allocation with Excessive Size Value

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102422

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...