CVE-2026-73055

creationtimestamp| type| source ---|---|--- 2026-08-15 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt5sqnsrdp2p 2026-08-16 00:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mt5uz67kqo2w 2026-08-16 00:00:39+00:00| seen|...

CVE-2026-73055 Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...