Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-73055
  • github.com/ericcornelissen/shescape
 Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox 15 Aug
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-73414
  • github.com/ericcornelissen/shescape
 Shescape: Shell injection via unescaped parentheses on Windows with CMD 12 Aug
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-73413
  • github.com/ericcornelissen/shescape
 Shescape: Quadratic-time denial of service in flag-protection 12 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-73412
  • github.com/ericcornelissen/shescape
 Shescape: Path disclosure on Unix with Zsh 12 Aug
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-73411
  • github.com/ericcornelissen/shescape
 Shescape: Home-directory disclosure in assignment context on Unix with Dash 12 Aug
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-gm3r-q2wp-hw87
  • npm/shescape
 Shescape: Quadratic-time denial of service in the flag-protection 24 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-q53c-4prm-w95q
  • npm/shescape
 Shescape: Home-directory disclosure in assignment context on Unix with Dash 24 Jul
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-w4hw-qcx7-56pr
  • npm/shescape
 Shescape: Shell injection via unescaped parentheses on Windows with CMD 24 Jul
  • Fix available
  • Severity - 9.2 (Critical)
GHSA-6v4m-fw66-8r4x
  • npm/shescape
 Shescape: Path disclosure on Unix with Zsh 24 Jul
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-9jfh-9xrq-4vwm
  • npm/shescape
 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash 11 Mar
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-32094
  • github.com/ericcornelissen/shescape
 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash 11 Mar
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-30916
  • github.com/ericcornelissen/shescape
 Shescape has possible misidentification of shell due to link chains 09 Mar
  • Fix available
  • Severity - 2.9 (Low)
GHSA-66pp-5p9w-q87j
  • npm/shescape
 Shescape has potential environment variable exposure on Windows with CMD 26 Mar 2025
  • Fix available
  • Severity - 2.1 (Low)
CVE-2025-30222
  • github.com/ericcornelissen/shescape
 Shescape has potential environment variable exposure on Windows with CMD 25 Mar 2025
  • Fix available
  • Severity - 2.1 (Low)
CVE-2023-40185
  • github.com/ericcornelissen/shescape
 Shescape on Windows escaping may be bypassed in threaded context 23 Aug 2023
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-j55r-787p-m549
  • npm/shescape
 Shescape on Windows escaping may be bypassed in threaded context 22 Aug 2023
  • Fix available
  • Severity - 8.6 (High)
Load more...