{"action":"Upgrade shell-quote to 1.7.3 or later.","affected":[{"fixed":"1.7.3","introduced":"1.6.3"}],"component":"shell-quote","cve_ids":["CVE-2021-42740"],"ecosystem":"npm","epss":0.04221,"exploited":false,"fixed_versions":["1.7.3"],"ghsa_id":"GHSA-g4rg-993r-mgx7","id":"tcs_01M5KFQ1MG76KPQK9M5RNPTEHW","modified_at":"2026-09-10T03:49:38.560961563Z","published_at":"2022-05-24T19:18:27Z","references":["https://osv.dev/vulnerability/GHSA-g4rg-993r-mgx7","https://nvd.nist.gov/vuln/detail/CVE-2021-42740","https://github.com/ljharb/shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe","https://github.com/ljharb/shell-quote","https://github.com/ljharb/shell-quote/blob/master/CHANGELOG.md#173","https://www.npmjs.com/package/shell-quote"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g4rg-993r-mgx7","url":"https://osv.dev/vulnerability/GHSA-g4rg-993r-mgx7"}],"summary":"Improper Neutralization of Special Elements used in a Command in Shell-quote"}