shescape vulnerabilities (npm)
13 vulnerabilities.
-
shescapenpm Shescape: Quadratic-time denial of service in flag-protection 8.7 High -
shescapenpm Shescape: Home-directory disclosure in assignment context on Unix with Dash 6.3 Medium -
shescapenpm Shescape: Shell injection via unescaped parentheses on Windows with CMD 9.2 Critical -
shescapenpm Shescape: Path disclosure on Unix with Zsh 6.3 Medium -
shescapenpm Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash 6.9 Medium -
shescapenpm Shescape has potential environment variable exposure on Windows with CMD 2.1 Low -
shescapenpm Shescape on Windows escaping may be bypassed in threaded context 6.5 Medium -
shescapenpm Shescape potential environment variable exposure on Windows with CMD 3.1 Low -
shescapenpm Regular Expression Denial of Service (ReDoS) 5.3 Medium -
shescapenpm Insufficient escaping of whitespace in shescape 9.8 Critical -
shescapenpm Insufficient escaping of line feeds for CMD in shescape 8.1 High -
shescapenpm Exposure of home directory through shescape on Unix with Bash 6.2 Medium -
shescapenpm Null characters not escaped in shescape 6.3 Medium