Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/26 2:54 p.m.11 views

GHSA-66PP-5P9W-Q87J Shescape has potential environment variable exposure on Windows with CMD

Impact This impact users of Shescape on Windows that explicitly configure shell: 'cmd.exe' or shell: true using any of quote/quoteAll/escape/escapeAll. An attacker may be able to get read-only access to environment variables. Example: javascript import as cp from "node:childprocess"; import...

5.9CVSS6.3AI score0.0018EPSS
SaveExploits0References6
Rows per page
Query Builder