shell-quote
1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed
Your version
1.12.0 is the newest release of 1.x.
In short
1 security
Security
Fixes 1 advisory that affected 1.7.2
- CriticalImproper Neutralization of Special Elements used in a Command in Shell-quoteGHSA-g4rg-993r-mgx7 · 24 May 2022Fixed in 1.7.3
2 advisories affect 1.7.3; 1.9.0 fixes them
- Criticalshell-quote quote() does not escape newlines in object .op valuesGHSA-w7jw-789q-3m8p · 9 Jun 2026Fixed in 1.8.4
- Highshell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)GHSA-395f-4hp3-45gv · 20 Jul 2026Fixed in 1.9.0
Release note
- security
Fix a security issue where the regex for windows drive letters allowed some shell meta-characters
to escape the quoting rules. (CVE-2021-42740)