Browse CVEs

MEDIUM 6.5 CVE-2026-32094 Shescape is a simple shell escape library for JavaScript. Prior to 2.1.10, Shescape#escape() does not escape square-bracket glob syntax for Bash, Bus… Shescape 2.1.10+ Fix from $1,6002026-03-11 HIGH 8.6 CVE-2023-40185 shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability c… Shescape 1.7.4+ Fix from $1,9502023-08-23 HIGH 7.5 CVE-2022-25918 The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the escape function in index.js,… Shescape Patch available Fix from $1,9502022-10-27 HIGH 7.5 CVE-2022-36064 Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts users that use Shescape to esca… Shescape 1.5.10+ Fix from $1,9502022-09-06 CRITICAL 9.8 CVE-2022-31179 Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts… Shescape 1.5.8+ Fix from $2,3002022-08-01 CRITICAL 9.8 CVE-2022-31180 Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolatin… Shescape 1.5.8+ Fix from $2,3002022-08-01 MEDIUM 5.5 CVE-2022-24725 Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when… Shescape 1.5.1+ Fix from $1,6002022-03-03 HIGH 7.8 CVE-2021-21384 shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to defend against shell injection… Shescape 1.1.3+ Fix from $1,9502021-03-19