shescape

10 known vulnerabilities · 1 critical · 1 high

Shescape potential environment variable exposure on Windows with CMD

Published Jun 22, 2023

Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash

Published Mar 11, 2026

Shescape has potential environment variable exposure on Windows with CMD

Published Mar 26, 2025

Withdrawn Advisory: Shescape has possible misidentification of shell due to link chains

Published Mar 7, 2026

Shescape vulnerable to insufficient escaping of whitespace

Published Jul 15, 2022

Null characters not escaped

Published Mar 18, 2021

Inefficient Regular Expression Complexity in shescape

Published Oct 25, 2022

Shescape on Windows escaping may be bypassed in threaded context

Published Aug 22, 2023

Exposure of home directory through shescape on Unix with Bash

Published Mar 3, 2022

Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD

Published Jul 15, 2022

Check your entire dependency tree at onceRun dependency scan →