By vendor

Shell-Quote_project vulnerabilities

Known CVEs affecting Shell-Quote_project products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-13311HIGH 7.5

  shell-quote, a popular Node.js library for parsing shell command strings, contains a performance vulnerability that allows an attacker to cause a denial of service by supplying a specially crafted input string. The vulnerability exists because the library uses an inefficient algorithm that becomes exponentially slower as input size grows. An attacker with the ability to provide input to an application using this library can freeze the application's event loop, making it unresponsive. No data theft or code execution is possible; the impact is purely on availability.