Shescape potential environment variable exposure on Windows with CMD
Modified: 9/10/2026
package
pkg:npm/shescape
Shescape potential environment variable exposure on Windows with CMD
Modified: 9/10/2026
Exposure of home directory through shescape on Unix with Bash
Modified: 11/8/2023
Shescape vulnerable to insufficient escaping of whitespace
Modified: 11/8/2023
Shescape has potential environment variable exposure on Windows with CMD
Modified: 9/10/2026
Shescape: Path disclosure on Unix with Zsh
Modified: 8/27/2026
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Modified: 3/13/2026
Inefficient Regular Expression Complexity in shescape
Modified: 11/8/2023
Null characters not escaped
Modified: 9/10/2026
Shescape: Quadratic-time denial of service in the flag-protection
Modified: 8/12/2026
Shescape on Windows escaping may be bypassed in threaded context
Modified: 11/8/2023
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Modified: 11/8/2023
Shescape: Home-directory disclosure in assignment context on Unix with Dash
Modified: 8/12/2026
Shescape: Shell injection via unescaped parentheses on Windows with CMD
Modified: 8/12/2026