CVE-2026-13311

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 25, 2026

Last Seen

June 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Severity DoS Vulnerability in Node.js shell-quote Package Disclosed67.5

CVE-2026-13311 is a high-severity Denial of Service (DoS) vulnerability affecting the Node.js package shell-quote (versions up to 1.8.4). It allows unauthenticated attackers to exploit the quadratic algorithmic complexity in the parse() function, blocking the Node.js event loop and causing service o...