USN-8410-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 09 Jun 2026, 08:38
Last modified:29 Jul 2026, 19:59

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Jun 2026, 08:38
Published
Vulnerability first disclosed
29 Jul 2026, 19:59
Last Modified
Vulnerability information updated

Description

node-shell-quote vulnerability Akshat Sinha discovered that shell-quote improperly validated object-token inputs. An attacker could possibly use this issue to cause shell-quote to crash, resulting in a denial of service, or execute arbitrary code.

Affected Systems

  • ubuntu•node-shell-quote

    < 1.6.1+20160617-git72fb5a8ce29b-1ubuntu0.1~esm1 | < 1.7.3+~1.7.1-1ubuntu0.1~esm1 | < 1.7.4+~1.7.1-1ubuntu0.24.04.1 | < 1.7.4+~1.7.1-1ubuntu0.25.10.1 | < 1.8.3+~1.7.5-1ubuntu0.1~esm1

References (2)