CVE-2021-42740
1 advisory.
npm/shell-quote CVE-2021-42740: critical 9.8, EPSS 4.22%
Improper Neutralization of Special Elements used in a Command in Shell-quote
Action: Upgrade shell-quote to 1.7.3 or later.
npm i shell-quote@1.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.3 | 1.7.3 | - |
Fixed versions
| 1.7.3 |
Sources
- osv: GHSA-g4rg-993r-mgx7
- https://nvd.nist.gov/vuln/detail/CVE-2021-42740
- https://github.com/ljharb/shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe
- https://github.com/ljharb/shell-quote
- https://github.com/ljharb/shell-quote/blob/master/CHANGELOG.md#173
- https://www.npmjs.com/package/shell-quote
CVE-2021-42740 · published · modified · JSON