TI-2026-24632 CVE-2026-32094 · GHSA-9jfh-9xrq-4vwm
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Priority HIGH 70
Shescape is a simple shell escape library for JavaScript.
Vulnerabilities
9 records
TI-2023-21058 CVE-2023-40185 · GHSA-j55r-787p-m549
Shescape on Windows escaping may be bypassed in threaded context
Priority LOW 38
shescape is simple shell escape library for JavaScript.
TI-2023-17993 CVE-2023-35931 · GHSA-3g7p-8qhx-mc8r
Shescape potential environment variable exposure on Windows with CMD
Priority LOW 22
Shescape is a simple shell escape library for JavaScript.
TI-2022-09469 CVE-2022-25918 · GHSA-cr84-xvw4-qx3c
Regular expression denial of service (ReDoS) in shescape
Priority HIGH 72
The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the escape function in index.js, due to the usage of insecure regex in the escapeArgBash function.
Priority HIGH 66
Shescape is a shell escape package for JavaScript.
TI-2022-13219 CVE-2022-31179 · GHSA-jjc5-fp7p-6f8w
Insufficient escaping of line feeds for CMD in shescape
Priority HIGH 75
Shescape is a simple shell escape package for JavaScript.
TI-2022-13220 CVE-2022-31180 · GHSA-44vr-rwwj-p88h
Insufficient escaping of whitespace in shescape
Priority HIGH 82
Shescape is a simple shell escape package for JavaScript.
TI-2022-08540 CVE-2022-24725 · GHSA-446w-rrm4-r47f
Exposure of home directory through shescape on Unix with Bash
Priority MEDIUM 61
Shescape is a shell escape package for JavaScript.
TI-2021-04483 CVE-2021-21384 · GHSA-f2rp-38vg-j3gh
Null characters not escaped in shescape
Priority LOW 35
shescape is a simple shell escape package for JavaScript.