Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

shescape

npm

simple shell escape library

View on github.com · View on npmjs.org

Security Advisories for shescape in npm

High
4 months ago

Shescape: Quadratic-time denial of service in the flag-protection GSA_kwCzR0hTQS1nbTNyLXEyd3AtaHc4N84ABftf

npm shescape
Moderate
4 months ago

Shescape: Home-directory disclosure in assignment context on Unix with Dash GSA_kwCzR0hTQS1xNTNjLTRwcm0tdzk1cc4ABfte

npm shescape
Critical
4 months ago

Shescape: Shell injection via unescaped parentheses on Windows with CMD GSA_kwCzR0hTQS13NGh3LXFjeDctNTZwcs4ABftd

npm shescape
Moderate
4 months ago

Shescape: Path disclosure on Unix with Zsh GSA_kwCzR0hTQS02djRtLWZ3NjYtOHI0eM4ABftc

npm shescape
Moderate
8 months ago

Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash GSA_kwCzR0hTQS05amZoLTl4cnEtNHZ3bc4ABTfz

npm shescape
Low
over 1 year ago

Shescape has potential environment variable exposure on Windows with CMD GSA_kwCzR0hTQS02NnBwLTVwOXctcTg3as4ABF6n

npm shescape
High
about 3 years ago

Shescape on Windows escaping may be bypassed in threaded context GSA_kwCzR0hTQS1qNTVyLTc4N3AtbTU0Oc4AA1aq

npm shescape
Low
over 3 years ago

Shescape potential environment variable exposure on Windows with CMD GSA_kwCzR0hTQS0zZzdwLThxaHgtbWM4cs4AAz_2

npm shescape
High
about 4 years ago

Inefficient Regular Expression Complexity in shescape GSA_kwCzR0hTQS1jcjg0LXh2dzQtcXgzY84AAvio

npm shescape
Critical
over 4 years ago

Shescape vulnerable to insufficient escaping of whitespace GSA_kwCzR0hTQS00NHZyLXJ3d2otcDg4aM4AAtaE

npm shescape
High
over 4 years ago

Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD GSA_kwCzR0hTQS1qamM1LWZwN3AtNmY4d84AAtaD

npm shescape
Moderate
over 4 years ago

Exposure of home directory through shescape on Unix with Bash GSA_kwCzR0hTQS00NDZ3LXJybTQtcjQ3Zs0v7w

npm shescape
High
over 5 years ago

Null characters not escaped MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYycnAtMzh2Zy1qM2do

npm shescape

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

High 5 Moderate 4 Low 2 Critical 2