Ericcornelissen vulnerabilities

Products

• Shescape 15

Newest

• ericcornelissen shescape Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox CVE-2026-73055 6.3 MediumAugust 15, 2026
• ericcornelissen shescape Shescape: Quadratic-time denial of service in flag-protection CVE-2026-73413 Fix available 8.7 HighJuly 24, 2026
• ericcornelissen shescape Shescape: Home-directory disclosure in assignment context on Unix with Dash CVE-2026-73411 Fix available 6.3 MediumJuly 24, 2026
• ericcornelissen shescape Shescape: Shell injection via unescaped parentheses on Windows with CMD CVE-2026-73414 Fix available 9.2 CriticalJuly 24, 2026
• ericcornelissen shescape Shescape: Path disclosure on Unix with Zsh CVE-2026-73412 Fix available 6.3 MediumJuly 24, 2026
• ericcornelissen shescape Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash CVE-2026-32094 Fix available 6.9 MediumMarch 11, 2026
• ericcornelissen shescape Shescape has potential environment variable exposure on Windows with CMD CVE-2025-30222 Fix available 2.1 LowMarch 25, 2025
• ericcornelissen shescape Shescape on Windows escaping may be bypassed in threaded context CVE-2023-40185 Fix available 6.5 MediumAugust 22, 2023
• ericcornelissen shescape Shescape potential environment variable exposure on Windows with CMD CVE-2023-35931 Fix available 3.1 LowJune 22, 2023
• ericcornelissen shescape Regular Expression Denial of Service (ReDoS) CVE-2022-25918 Fix available 5.3 MediumOctober 25, 2022
• ericcornelissen shescape Shescape Inefficient Regular Expression Complexity vulnerability CVE-2022-36064 5.9 MediumSeptember 6, 2022
• ericcornelissen shescape Insufficient escaping of whitespace in shescape CVE-2022-31180 Fix available 9.8 CriticalJuly 15, 2022
• ericcornelissen shescape Insufficient escaping of line feeds for CMD in shescape CVE-2022-31179 Fix available 8.1 HighJuly 15, 2022
• ericcornelissen shescape Exposure of home directory through shescape on Unix with Bash CVE-2022-24725 Fix available 6.2 MediumMarch 3, 2022
• ericcornelissen shescape Null characters not escaped in shescape CVE-2021-21384 Fix available 6.3 MediumMarch 18, 2021
• ericcornelissen git-tag-annotation-action Shell-injection in git-tag-annotation GitHub action CVE-2020-15272 8.7 HighOctober 26, 2020