Skip to contentEriccornelissen Shescape vulnerabilities
- ericcornelissen shescapeShescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBoxCVE-2026-730556.3 Medium
- ericcornelissen shescapeShescape: Quadratic-time denial of service in flag-protectionCVE-2026-73413Fix available8.7 High
- ericcornelissen shescapeShescape: Home-directory disclosure in assignment context on Unix with DashCVE-2026-73411Fix available6.3 Medium
- ericcornelissen shescapeShescape: Shell injection via unescaped parentheses on Windows with CMDCVE-2026-73414Fix available9.2 Critical
- ericcornelissen shescapeShescape: Path disclosure on Unix with ZshCVE-2026-73412Fix available6.3 Medium
- ericcornelissen shescapeShescape escape() leaves bracket glob expansion active on Bash, BusyBox, and DashCVE-2026-32094Fix available6.9 Medium
- ericcornelissen shescapeShescape has potential environment variable exposure on Windows with CMDCVE-2025-30222Fix available2.1 Low
- ericcornelissen shescapeShescape on Windows escaping may be bypassed in threaded contextCVE-2023-40185Fix available6.5 Medium
- ericcornelissen shescapeShescape potential environment variable exposure on Windows with CMDCVE-2023-35931Fix available3.1 Low
- ericcornelissen shescapeRegular Expression Denial of Service (ReDoS)CVE-2022-25918Fix available5.3 Medium
- ericcornelissen shescapeShescape Inefficient Regular Expression Complexity vulnerabilityCVE-2022-360645.9 Medium
- ericcornelissen shescapeInsufficient escaping of whitespace in shescapeCVE-2022-31180Fix available9.8 Critical
- ericcornelissen shescapeInsufficient escaping of line feeds for CMD in shescapeCVE-2022-31179Fix available8.1 High
- ericcornelissen shescapeExposure of home directory through shescape on Unix with BashCVE-2022-24725Fix available6.2 Medium
- ericcornelissen shescapeNull characters not escaped in shescapeCVE-2021-21384Fix available6.3 Medium