178 matches found
CVE-2026-102422
shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...
PT-2026-108575
Security vulnerability affects the argo-workflows package. shell-quote prior to 1...
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
PT-2026-109365
Уязвимость функции quote npm-пакета shell-quote связана с непринятием мер по нейтрализации специальных элементов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
Security Bulletin: Multiple security vulnerabilities found and remediated in IBM webMethods Managed File Transfer
Summary IBM webMethods Managed File Transfer is vulnerable to multiple issues in third-party JavaScript libraries used by its web user interface. The Axios HTTP client is susceptible to prototype pollution attacks that could allow an attacker to intercept or hijack HTTP transport, and to stream...
ROOT-APP-NPM-CVE-2026-13311 CVE-2026-13311 in shell-quote - Patched by Root
Root has patched CVE-2026-13311 in the shell-quote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-42740 CVE-2021-42740 in shell-quote - Patched by Root
Root has patched CVE-2021-42740 in the shell-quote package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784683086 TuxCare security update for shell-quote (2 CVEs)
TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.7.3-tuxcare.1...
CLSA-2026-1783558964 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.2...
CLSA-2026-1773879463 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.1...
CLSA-2026-1773274563 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.4.3-tuxcare.1...
PT-2026-75336
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.2...
PT-2026-75599
TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.7.3-tuxcare.1...
PT-2026-73955
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.4.3-tuxcare.1...
PT-2026-74025
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.1...
shell-quote npm Code Execution
The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...