-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 12 Nov 2026 12:34:21 -0600 Source: node-shell-quote Architecture: source Version: 1.7.4+~1.7.1-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Simon Quigley <tsimonq2@debian.org> Changes: node-shell-quote (1.7.4+~1.7.1-1+deb12u2) bookworm-security; urgency=high . * Team upload. * CVE-2026-102422: Reject a line break in a string after a comment. * CVE-2026-13311: Finalize parsed tokens in linear time. Checksums-Sha1: cc32d70c2d6c235c0df0d729c8a5a75437879aa9 2508 node-shell-quote_1.7.4+~1.7.1-1+deb12u2.dsc 2d059091214a02c29f003f591032172b2aff77e8 2241 node-shell-quote_1.7.4+~1.7.1.orig-types-shell-quote.tar.gz 526309c375cb6d9dff84f04d6bf6cb21038339db 15359 node-shell-quote_1.7.4+~1.7.1.orig.tar.gz 6cc26e64a30c14d3f3afb77aa44417c9b0cb9a9c 7468 node-shell-quote_1.7.4+~1.7.1-1+deb12u2.debian.tar.xz 293728bbee3fd3e6307ca856c4f3a11b74cd004d 17174 node-shell-quote_1.7.4+~1.7.1-1+deb12u2_source.buildinfo Checksums-Sha256: 17b6d5c80028831cbb2dce8e49e8d307d6404fc15f4c39f5fcf56a254b8da3da 2508 node-shell-quote_1.7.4+~1.7.1-1+deb12u2.dsc 732c849a97ba0778c6bd224b09895b95f7ba0bcdeb41658dfbefbd6fcb48c42d 2241 node-shell-quote_1.7.4+~1.7.1.orig-types-shell-quote.tar.gz c47d07f375e52ef8c5b27382a9fdc0018e1a50954a3480b13fc96c8bb0314967 15359 node-shell-quote_1.7.4+~1.7.1.orig.tar.gz a7d924d28003572341843f237bd29cba23aa3d934add3b83d9882b6686242d1e 7468 node-shell-quote_1.7.4+~1.7.1-1+deb12u2.debian.tar.xz 8a5d289f61ed056677bc2cf31ccbb03471db784b99099bb41bbbc71627ce314e 17174 node-shell-quote_1.7.4+~1.7.1-1+deb12u2_source.buildinfo Files: 6044ee3f8b3fc23c28328b54f47567e2 2508 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb12u2.dsc c932ae6cdd4e3244131b099713a03457 2241 javascript optional node-shell-quote_1.7.4+~1.7.1.orig-types-shell-quote.tar.gz 7af11564f75bafc25260ad455fb2a0b9 15359 javascript optional node-shell-quote_1.7.4+~1.7.1.orig.tar.gz 1067bb7bf2e9e037392dc596df88a366 7468 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb12u2.debian.tar.xz 2a57d017de720bf5d1893a1be5eacbe7 17174 javascript optional node-shell-quote_1.7.4+~1.7.1-1+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmr2BugACgkQ4n8s+EWM L6R5zA/+Iz7hxCrJH8PGICBqIZNxvtXLjmlkv5VVD1RS/SbFqIV3zUrQyc9oRVp4 OjP4VqS0H6djY4ttGD8QrcpZdrWlebJusDErNy1PuaeslszY73343nmVp5lVlqva tdSbX7jQAI4twSV1kv0lNlKKeqA1RqYr+DAsPBpnrQzScaPtFUcZYemX2oHWqnJ2 /9qZEhqttTGgM5ouUNQRy+7loWAH/2u4YTirU73mV1P3Pqrqmx2SEDNPr1ROHTYq cOJNPcbx5LfAC6TyukPniwtjngQo/FcyL9Xr5RvV4oeQ/LPkIWmGgGvMJT1ZD2EK ozV6oUnwWXpEm4o52b3NhmQgSo8QtWxlTmTKCwifbcTvQLb28OPHGLY0Gme1DQ4Y fIWspT5k0YTID6iPQpCgG1XJlhrKxvyRhQ/5juRUUwgfNHpI97b8f8aOFNAx04DV /KekiibiOLbpkDheALEAC+9SWWvWLC0bbbduLQ7AKr1ADnbTe4Eibb3isrwgoz9d bGahIoTBqorg+B3zX86URXFjvehBl0StRwCqWviXSlGZ0t8/b9wTgY5iV3HVO2Mq CY3uLAQNLGPGQ70EXT1TzcM4b54/Taa6XOIltT9KSu9PTBoqTrgZVE8pnD/EQJfz /qmOFsc4hiGZ7N1lFRzca2CYnV8QkwfpXyAlRDcVg8x55hP0a2o= =Oh5L -----END PGP SIGNATURE-----