Lucene search
Veracode Vulnerability DatabaseVERACODE:37709HistoryOct 28, 2022 - 5:35 a.m.
Regular Expression Denial Of Service (ReDoS)
2022-10-2805:35:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
52
shescape
vulnerability
redos
unix.js
escapeargbash
software
0.002 Low
EPSS
Percentile
59.0%
shescape is vulnerable to denial of service. The vulnerability is due to insecure regex in the escapeArgBash function of unix.js which allows an attacker to crash the application by providing a malicious user input.
Related
nvd
nvd
CVE-2022-25918
2022-10-27 10:15:10
cvelist
cvelist
CVE-2022-25918 Regular Expression Denial of Service (ReDoS)
2022-10-27 00:00:00
github
github
Inefficient Regular Expression Complexity in shescape
2022-10-25 22:27:32
prion
prion
Code injection
2022-10-27 10:15:00
osv
osv
CVE-2022-25918
2022-10-27 10:15:10
Inefficient Regular Expression Complexity in shescape
2022-10-25 22:27:32
cve
cve
CVE-2022-25918
2022-10-27 10:15:10