Shescape Project vulnerabilities

Products

• Shescape 9

Newest

• ericcornelissen shescape Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash CVE-2026-32094 Fix available 6.9 MediumMarch 11, 2026
• ericcornelissen shescape Shescape on Windows escaping may be bypassed in threaded context CVE-2023-40185 Fix available 6.5 MediumAugust 22, 2023
• ericcornelissen shescape Shescape potential environment variable exposure on Windows with CMD CVE-2023-35931 Fix available 3.1 LowJune 22, 2023
• ericcornelissen shescape Regular Expression Denial of Service (ReDoS) CVE-2022-25918 Fix available 5.3 MediumOctober 25, 2022
• ericcornelissen shescape Shescape Inefficient Regular Expression Complexity vulnerability CVE-2022-36064 5.9 MediumSeptember 6, 2022
• ericcornelissen shescape Insufficient escaping of whitespace in shescape CVE-2022-31180 Fix available 9.8 CriticalJuly 15, 2022
• ericcornelissen shescape Insufficient escaping of line feeds for CMD in shescape CVE-2022-31179 Fix available 8.1 HighJuly 15, 2022
• ericcornelissen shescape Exposure of home directory through shescape on Unix with Bash CVE-2022-24725 Fix available 6.2 MediumMarch 3, 2022
• ericcornelissen shescape Null characters not escaped in shescape CVE-2021-21384 Fix available 6.3 MediumMarch 18, 2021