What’s Vulnerable › Products

ljharb shell-quote vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ljharb shell-quote version is affected

Latest ljharb shell-quote vulnerabilities

• CVE-2026-13311 — shell-quote parse() is quadratic in token count, enabling denial of service (CVSS 7.5)
• CVE-2021-42740 — (CVSS 9.8)
• CVE-2016-10541 — (CVSS 9.8)