Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

shescape — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in shescape, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities and weaknesses associated with shescape, covering Common Weakness Enumerations and vendor-reported advisories. The collection includes a comprehensive list of identified issues within the shescape product ecosystem, spanning from early discovery reports through to the most recent patches and fixes issued by the vendor. By reviewing this aggregated data, users can effectively track a vendor's advisory timeline to stay informed about the patching cadence and response speed. Researchers and security analysts can also use this resource to understand the prevalence and context of specific weakness classes as they apply to shescape, allowing for better risk assessment and prioritization. Furthermore, the page serves as a historical record, enabling users to look up a product's vulnerability history to analyze trends, identify recurring security flaws, and evaluate the overall security posture of the software over time. This centralized view simplifies the process of correlating multiple reports and understanding the impact of various CVEs on the product. It is designed to provide clarity and structure to the often fragmented landscape of vulnerability disclosures, ensuring that stakeholders have access to a single, reliable source for historical and current security information regarding shescape.

Vendor: ericcornelissen

CVE ID Title CVSS Severity Published
CVE-2026-73055 Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox CWE-116 4.8 Medium 2026-08-15
CVE-2026-73414 Shescape: Shell injection via unescaped parentheses on Windows with CMD CWE-78 9.2 Critical 2026-08-12
CVE-2026-73413 Shescape: Quadratic-time denial of service in flag-protection CWE-400 8.7 High 2026-08-12
CVE-2026-73412 Shescape: Path disclosure on Unix with Zsh CWE-78 6.3 Medium 2026-08-12
CVE-2026-73411 Shescape: Home-directory disclosure in assignment context on Unix with Dash CWE-116 6.3 Medium 2026-08-12
CVE-2026-32094 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash CWE-200 7.5AI High AI 2026-03-11
CVE-2025-30222 Shescape has potential environment variable exposure on Windows with CMD CWE-200 7.5AI High AI 2025-03-25
CVE-2023-40185 Shescape on Windows escaping may be bypassed in threaded context CWE-150 6.5 Medium 2023-08-23
CVE-2023-35931 Shescape potential environment variable exposure on Windows with CMD CWE-526 3.1 Low 2023-06-23
CVE-2022-25918 Regular Expression Denial of Service (ReDoS) 5.3 Medium 2022-10-27
CVE-2022-36064 Shescape Inefficient Regular Expression Complexity vulnerability CWE-1333 5.9 Medium 2022-09-06
CVE-2022-31179 Insufficient escaping of line feeds for CMD in shescape CWE-74 8.1 High 2022-08-01
CVE-2022-31180 Insufficient escaping of whitespace in shescape CWE-74 9.8 Critical 2022-08-01
CVE-2022-24725 Exposure of home directory through shescape on Unix with Bash CWE-200 6.2 Medium 2022-03-03
CVE-2021-21384 Null characters not escaped in shescape CWE-88 6.3 Medium 2021-03-18

All 15 known CVE vulnerabilities affecting shescape with full Chinese analysis, references, and POCs where available.