Known vulnerabilities in shell-quote
Vendor:
ljharb
Software:
shell-quote
Software CPE:
cpe:2.3:a:ljharb:shell-quote:*:*:*:*:*:*:*:*
Website:
https://github.com/ljharb
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139892 - Inefficient Algorithmic Complexity CVE-2026-13311 |
CWE-407 | Medium | 1.9.0 | 28.07.2026 |
SB2026072880 |
||
| #VU138393 - Command injection CVE-2026-9277 |
CWE-77 | High | 1.8.4 | 20.07.2026 |
SB2026072009 SB2026072011 SB20260720386 and 6 more |