shell-quote: shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token
shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token (critical). GHSA-pqg4-j6r4-53mv, CVE-2026-102422.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?