CVE-2026-13311

creationtimestamp| type| source ---|---|--- 2026-06-25 06:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp3qussy5o2f 2026-06-25 06:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116809218637128816 2026-06-25 06:45:49+00:00| seen|...

UBUNTU-CVE-2026-13311

shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse runs in On^2 time relative to the number of input tokens. An attacker who can supply an...