Read the docs

ericcornelissen

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

ericcornelissen records in CISA KEV

No ericcornelissen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shescape 9 records HIGH

Records

9 records in Shescape · all components

TI-2022-09469 CVE-2022-25918 · GHSA-cr84-xvw4-qx3c

Regular expression denial of service (ReDoS) in shescape

Priority HIGH 72

The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the escape function in index.js, due to the usage of insecure regex in the escapeArgBash function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01629 Published 2022-10-27 Fixed in 1.6.1 CWE-1333
TI-2021-04483 CVE-2021-21384 · GHSA-f2rp-38vg-j3gh

Null characters not escaped in shescape

Priority LOW 35

shescape is a simple shell escape package for JavaScript.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00578 Published 2021-03-18 Fixed in 1.1.3 CWE-88
Open these records in search →