Skip to contentShescape Project Shescape vulnerabilities
- ericcornelissen shescapeShescape escape() leaves bracket glob expansion active on Bash, BusyBox, and DashCVE-2026-32094Fix available6.9 Medium
- ericcornelissen shescapeShescape on Windows escaping may be bypassed in threaded contextCVE-2023-40185Fix available6.5 Medium
- ericcornelissen shescapeShescape potential environment variable exposure on Windows with CMDCVE-2023-35931Fix available3.1 Low
- ericcornelissen shescapeRegular Expression Denial of Service (ReDoS)CVE-2022-25918Fix available5.3 Medium
- ericcornelissen shescapeShescape Inefficient Regular Expression Complexity vulnerabilityCVE-2022-360645.9 Medium
- ericcornelissen shescapeInsufficient escaping of whitespace in shescapeCVE-2022-31180Fix available9.8 Critical
- ericcornelissen shescapeInsufficient escaping of line feeds for CMD in shescapeCVE-2022-31179Fix available8.1 High
- ericcornelissen shescapeExposure of home directory through shescape on Unix with BashCVE-2022-24725Fix available6.2 Medium
- ericcornelissen shescapeNull characters not escaped in shescapeCVE-2021-21384Fix available6.3 Medium