Akshat Sinha discovered that shell-quote improperly validated object-token inputs. An attacker could possibly use this issue to cause shell-quote to crash, resulting in a denial of service, or execute arbitrary code.
1.7.4+~1.7.1-1ubuntu0.24.04.11.7.4+~1.7.1-1ubuntu0.25.10.11.6.1+20160617-git72fb5a8ce29b-1ubuntu0.1~esm11.7.3+~1.7.1-1ubuntu0.1~esm11.8.3+~1.7.5-1ubuntu0.1~esm1