From 8a32a3b3722d574c07da237875217e78ea7eca6a Mon Sep 17 00:00:00 2001 From: iarmbears <120352707+iarmbears@users.noreply.github.com> Date: Tue, 13 Dec 2022 12:44:38 -0500 Subject: [PATCH] Update shell-quote to 1.7.3 The shell-quote package before 1.7.3 for Node.js allows command injection. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index f130b86..49c16c9 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "minimatch": "^3.0.4", "pidtree": "^0.3.0", "read-pkg": "^3.0.0", - "shell-quote": "^1.6.1", + "shell-quote": "^1.7.3", "string.prototype.padend": "^3.0.0" }, "devDependencies": {