shescape

npm · Package

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Shescape has potential environment variable exposure on Windows with CMDCVE-2025-30222 · GHSA-66PP-5P9W-Q87J	shescape	npm	Low	Fix reported	2026-09-10
Shescape potential environment variable exposure on Windows with CMDCVE-2023-35931 · GHSA-3G7P-8QHX-MC8R	shescape	npm	Low	Fix reported	2026-09-10
Null characters not escapedCVE-2021-21384 · GHSA-F2RP-38VG-J3GH	shescape	npm	High	Fix reported	2026-09-10
Shescape: Path disclosure on Unix with ZshCVE-2026-73412 · GHSA-6V4M-FW66-8R4X	shescape	npm	Medium	Fix reported	2026-08-27
Shescape: Shell injection via unescaped parentheses on Windows with CMDCVE-2026-73414 · GHSA-W4HW-QCX7-56PR	shescape	npm	Critical	Fix reported	2026-08-12
Shescape: Quadratic-time denial of service in the flag-protectionCVE-2026-73413 · GHSA-GM3R-Q2WP-HW87	shescape	npm	High	Fix reported	2026-08-12
Shescape: Home-directory disclosure in assignment context on Unix with DashCVE-2026-73411 · GHSA-Q53C-4PRM-W95Q	shescape	npm	Medium	Fix reported	2026-08-12
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and DashCVE-2026-32094 · GHSA-9JFH-9XRQ-4VWM	shescape	npm	Medium	Fix reported	2026-03-13
Inefficient Regular Expression Complexity in shescape CVE-2022-25918 · GHSA-CR84-XVW4-QX3C	shescape	npm	High	Fix reported	2023-11-30
Shescape on Windows escaping may be bypassed in threaded contextCVE-2023-40185 · GHSA-J55R-787P-M549	shescape	npm	High	Fix reported	2023-11-09
Shescape vulnerable to insufficient escaping of whitespaceCVE-2022-31180 · GHSA-44VR-RWWJ-P88H	shescape	npm	Critical	Fix reported	2023-11-08
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMDCVE-2022-31179 · GHSA-JJC5-FP7P-6F8W	shescape	npm	High	Fix reported	2023-11-08
Exposure of home directory through shescape on Unix with BashCVE-2022-24725 · GHSA-446W-RRM4-R47F	shescape	npm	Medium	Fix reported	2023-11-08