SH
Product
Shescape
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Shescape to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31179 | 9.8 | Aug 1 | Insufficient escaping of line feeds for CMD in shescape Affected: before 1.5.8 |
| CVE-2022-31180 | 9.8 | Aug 1 | Insufficient escaping of whitespace in shescape Affected: 1.4.0 before 1.5.8 |
| CVE-2023-40185 | 8.6 | Aug 23 | shescape is simple shell escape library for JavaScript Affected: before 1.7.4 |
| CVE-2021-21384 | 7.8 | Mar 19 | shescape is a simple shell escape package for JavaScript Affected: before 1.1.3 |
| CVE-2022-25918 | 7.5 | Oct 27 | Regular Expression Denial of Service (ReDoS) Affected: 1.5.10; 1.6.0 |
| CVE-2022-36064 | 7.5 | Sep 6 | Shescape is a shell escape package for JavaScript Affected: 1.5.1 before 1.5.10 |
| CVE-2026-32094 | 6.5 | Mar 11 | Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash Affected: before 2.1.10 |
| CVE-2022-24725 | 5.5 | Mar 3 | Shescape is a shell escape package for JavaScript Affected: 1.4.0 before 1.5.1 |
| CVE-2023-35931 | 4.3 | Jun 23 | Shescape is a simple shell escape library for JavaScript Affected: before 1.7.1 |
Showing 9