Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2026/06/09 2:27 p.m.32 views

shell-quote quote() does not escape newlines in object .op values

Summary shell-quote's quote function did not validate object-token inputs against the operator model used by parse. The .op field was backslash-escaped character by character using /./g, which in JavaScript does not match line terminators \n, \r, U+2028, U+2029. A line terminator in .op therefore...

9.2CVSS5.6AI score0.00848EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder