Skip to content
OpenAdvisories

Vendor

ericcornelissen

15 known vulnerabilities.

Products

shescape 14 git-tag-annotation-action 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-30222

    Shescape has potential environment variable exposure on Windows with CMD

    Shescape is a simple shell escape library for JavaScript. Versions 1.7.2 through 2.1.1 are vulnerable to potential environment variable exposure on Windows with CMD. This impact users of Shescape on Windows that explicitly configure `shell: 'cmd.exe'` or `she…

    ericcornelissen shescape shescape npm
  • Low 3.1
    CVE-2023-35931

    Shescape potential environment variable exposure on Windows with CMD

    Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.

    ericcornelissen shescape shescape npm