CVE-2021-21384
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-21384
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21384.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-21384
- Aliases
- Related
- Published
- 2021-03-19T00:15:11Z
- Modified
- 2025-01-15T01:47:29.967078Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using Shescape to defend against shell injection may still be vulnerable against shell injection if the attacker manages to insert a into the payload. For an example see the referenced GitHub Security Advisory. The problem has been patched in version 1.1.3. No further changes are required.
- References