Ljharb vulnerabilities
We track 1 vulnerability in Ljharb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Ljharb vulnerabilities
- 7.5 High severity
shell-quote: Inefficient Algorithmic Complexity
shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse() runs in O(n^2) time relative to the number of inpu