Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Shescape MEDIUM 6.5
CVE-2026-32094

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.10, Shescape#escape() does not escape square-bracket glob syntax for Bash, Bus…

Fix: 2.1.10+
Fix from $1,600 2026-03-11
Shescape HIGH 8.6
CVE-2023-40185

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability c…

Fix: 1.7.4+
Fix from $1,950 2023-08-23
Shescape HIGH 7.5
CVE-2022-25918

The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the escape function in index.js,…

Patch available
Fix from $1,950 2022-10-27
Shescape HIGH 7.5
CVE-2022-36064

Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts users that use Shescape to esca…

Fix: 1.5.10+
Fix from $1,950 2022-09-06
Shescape CRITICAL 9.8
CVE-2022-31179

Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts…

Fix: 1.5.8+
Fix from $2,300 2022-08-01
Shescape CRITICAL 9.8
CVE-2022-31180

Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolatin…

Fix: 1.5.8+
Fix from $2,300 2022-08-01
Shescape MEDIUM 5.5
CVE-2022-24725

Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when…

Fix: 1.5.1+
Fix from $1,600 2022-03-03
Shescape HIGH 7.8
CVE-2021-21384

shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to defend against shell injection…

Fix: 1.1.3+
Fix from $1,950 2021-03-19