Known vulnerabilities in Shell-quote

Vendor: substack
Software: Shell-quote
Software CPE: cpe:2.3::substack:shell-quote:*:*:*:*:*:*:*:*
Website: https://github.com/substack
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Shell-quote Shell-quote is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67517 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-10541		 CWE-94 High
No
No
 1.6.1 20.09.2022 SB2018053118
SB2024042406
#VU67516 - Command injection
CVE-2021-42740		 CWE-77 High
No
No
 1.7.3 20.09.2022 SB2021102139
SB2022092053
SB2022092054
and 9 more