Command Injection

shell-quote is vulnerable to command injection. An attacker can inject unescaped shell metacharacters through a regex used in exports.quote function in the index.js...