Closed mend-bolt-for-github[bot] closed 4 years ago
quote and parse shell commands
path: /lethargy/node_modules/shell-quote/package.json
Library home page: http://registry.npmjs.org/shell-quote/-/shell-quote-0.0.1.tgz
The npm module "shell-quote" cannot correctly escape "greater than" and "lower than" operator used for redirection in shell. This might be possible vulnerability for many application which depends on shell-quote.
Publish Date: 2016-06-21
URL: WS-2016-0039
Base Score Metrics not available
Type: Upgrade version
Origin: https://nodesecurity.io/advisories/117
Release Date: 2016-06-21
Fix Resolution: Upgrade to at least version 1.6.1
Step up your Open Source Security Game with WhiteSource here
WS-2016-0039 - High Severity Vulnerability
quote and parse shell commands
path: /lethargy/node_modules/shell-quote/package.json
Library home page: http://registry.npmjs.org/shell-quote/-/shell-quote-0.0.1.tgz
Dependency Hierarchy: - :x: **shell-quote-0.0.1.tgz** (Vulnerable Library)The npm module "shell-quote" cannot correctly escape "greater than" and "lower than" operator used for redirection in shell. This might be possible vulnerability for many application which depends on shell-quote.
Publish Date: 2016-06-21
URL: WS-2016-0039
Base Score Metrics not available
Type: Upgrade version
Origin: https://nodesecurity.io/advisories/117
Release Date: 2016-06-21
Fix Resolution: Upgrade to at least version 1.6.1
Step up your Open Source Security Game with WhiteSource here