Known vulnerabilities in shell-quote

Vendor: ljharb
Software: shell-quote
Software CPE: cpe:2.3:a:ljharb:shell-quote:*:*:*:*:*:*:*:*
Website: https://github.com/ljharb
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting shell-quote shell-quote is affected by 3 known vulnerabilities: 2 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152734 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-102422		 CWE-78 High
No
No
 1.11.0 29.09.2026 SB2026092922
SB20261007143
#VU139892 - Inefficient Algorithmic Complexity
CVE-2026-13311		 CWE-407 Medium
No
No
 1.9.0 28.07.2026 SB2026072880
SB20261007143
#VU138393 - Command injection
CVE-2026-9277		 CWE-77 High
No
No
 1.8.4 20.07.2026 SB2026072009
SB2026072011
SB20260720386
and 6 more