Skip to content
OpenAdvisories

Vendor

ericcornelissen

15 known vulnerabilities.

Products

shescape 14 git-tag-annotation-action 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-73414

    Shescape: Shell injection via unescaped parentheses on Windows with CMD

    Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cmd.js does not escape `(` and `)` when applications use the escape or escapeAll APIs on Windows with shell set to cmd.exe, or with shel…

    ericcornelissen shescape shescape npm
  • Critical 9.8
    CVE-2022-31180

    Insufficient escaping of whitespace in shescape

    Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the `escape` or `escapeAll` functions with the `interpolation…

    ericcornelissen shescape shescape npm