Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ericcornelissen — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting ericcornelissen. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Ericcornelissen focuses on open-source security research, primarily identifying vulnerabilities in web applications and APIs. Their work commonly exposes remote code execution, cross-site scripting, and privilege escalation flaws, often in widely-used development tools. The researcher maintains a disciplined approach to responsible disclosure, with all 10 CVEs assigned reflecting systematic analysis rather than opportunistic findings. While no major public incidents are directly attributed to their work, their contributions consistently address critical weaknesses in infrastructure components. The researcher's CVE history demonstrates particular attention to input validation and authentication bypass issues, highlighting a consistent focus on preventing unauthorized system access and code execution.

Found 14 results / 15 Clear Filters
Top products by ericcornelissen: shescape git-tag-annotation-action
CVE ID Title CVSS Severity Published
CVE-2026-73055 Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox — shescape CWE-116 4.8 Medium 2026-08-15
CVE-2026-73414 Shescape: Shell injection via unescaped parentheses on Windows with CMD — shescape CWE-78 9.2 Critical 2026-08-12
CVE-2026-73413 Shescape: Quadratic-time denial of service in flag-protection — shescape CWE-400 8.7 High 2026-08-12
CVE-2026-73412 Shescape: Path disclosure on Unix with Zsh — shescape CWE-78 6.3 Medium 2026-08-12
CVE-2026-73411 Shescape: Home-directory disclosure in assignment context on Unix with Dash — shescape CWE-116 6.3 Medium 2026-08-12
CVE-2026-32094 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash — shescape CWE-200 7.5AI High AI 2026-03-11
CVE-2025-30222 Shescape has potential environment variable exposure on Windows with CMD — shescape CWE-200 7.5AI High AI 2025-03-25
CVE-2023-40185 Shescape on Windows escaping may be bypassed in threaded context — shescape CWE-150 6.5 Medium 2023-08-23
CVE-2023-35931 Shescape potential environment variable exposure on Windows with CMD — shescape CWE-526 3.1 Low 2023-06-23
CVE-2022-36064 Shescape Inefficient Regular Expression Complexity vulnerability — shescape CWE-1333 5.9 Medium 2022-09-06
CVE-2022-31179 Insufficient escaping of line feeds for CMD in shescape — shescape CWE-74 8.1 High 2022-08-01
CVE-2022-31180 Insufficient escaping of whitespace in shescape — shescape CWE-74 9.8 Critical 2022-08-01
CVE-2022-24725 Exposure of home directory through shescape on Unix with Bash — shescape CWE-200 6.2 Medium 2022-03-03
CVE-2021-21384 Null characters not escaped in shescape — shescape CWE-88 6.3 Medium 2021-03-18

This page lists every published CVE security advisory associated with ericcornelissen. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.