modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

chore(deps): bump shell-quote to ^1.8.4 (CVE fix) (#1711)

Browse source 
Bumps shell-quote from ^1.8.3 to ^1.8.4 in the root and server
packages to resolve a critical security advisory. Adds an npm
override so concurrency's pinned shell-quote@1.8.3 also resolves to
a patched version, leaving no vulnerable copy in the tree.


Claude-Session: https://claude.ai/code/session_01HiccCEh9mwCfVzE8qYcop1

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Cliff Hall 2026-07-17 20:00:21 -04:00 • committed by GitHub
commit 3119422932
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 276 additions and 270 deletions
Download patch file Download diff file Expand all files Collapse all files

2
server/package.json
View file

@ -38,7 +38,7 @@
"@modelcontextprotocol/sdk": "^1.25.2",
"cors": "^2.8.5",
"express": "^5.1.0",
"shell-quote": "^1.8.3",
"shell-quote": "^1.8.4",
"shx": "^0.3.4",
"spawn-rx": "^5.1.2",
"ws": "^8.18.0",