shell-quote

1.12.0 · 2 Oct 2026MIT96.3M / weekRepository npm Atom feed

Your version

0.1.1

17 Apr 2013Where it was published

In short

1 changed

Security

2 advisories affect 0.1.1; 1.9.0 fixes them

Critical
Potential Command Injection in shell-quoteGHSA-qg8p-v9q4-gh34 · 18 Feb 2019
Fixed in 1.6.1
High
shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)GHSA-395f-4hp3-45gv · 20 Jul 2026
Fixed in 1.9.0

Release note

Commits

Return empty list when parsing an empty (or whitespace-only) string 1475717