2 matches found
Input validation
Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the escape or escapeAll functions with the interpolation option set to true. The result is that if ...
7.5CVSS9.8AI score0.0185EPSS
SaveExploits1References5Affected Software1
GHSA-44VR-RWWJ-P88H Shescape vulnerable to insufficient escaping of whitespace
Impact This only impacts users that use the escape or escapeAll functions with the interpolation option set to true. Example: javascript import cp from "node:childprocess"; import as shescape from "shescape"; // 1. Prerequisites const options = shell: "bash", // Or shell: "dash", // Or shell:...
9.8CVSS9.7AI score0.0185EPSS
SaveExploits1References8
20