CVE-2016-10541

creationtimestamp| type| source ---|---|--- 2019-02-18 23:58:29+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-qg8p-v9q4-gh34...

@cobalt-engine/cobower (2.0.0), @financial-times/n-heroku-tools (>=6.1.3, <=7.3.0) +436 more potentially affected by CVE-2016-10541 via shell-quote (>=1.3.3, <=1.6.0)

shell-quote NPM version =1.3.3, =6.1.3, =0.0.1, =0.9.0, =0.0.1, =1.0.0, =1.24.1, =2.3.0, =2.1.1, =3.0.0, =0.1.3, =0.1.12 and more Source cves: CVE-2016-10541 Source advisory: OSV:GHSA-QG8P-V9Q4-GH34...

CVE-2016-10541

The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape "" and "" operator used for redirection in shell. Applications that depend on shell-quote may also be vulnerable. A malicious user could perform code injection...

CVE-2016-10541

CVE-2016-10541 – shell-quote (npm) : The npm module shell-quote, version 1.6.0 and earlier, cannot correctly escape "&gt;" and ", ;, {, } contribute to successful injection, underscoring the need for prompt update and reevaluation of input handling. Monitor for updates and apply the fixed release...