Filtered by vendor Ericcornelissen Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-30916 1 Ericcornelissen 1 Shescape 2026-03-10 N/A
Shescape is a simple shell escape library for JavaScript. Prior to 2.1.9, an attacker may be able to bypass escaping for the shell being used. This can result, for example, in exposure of sensitive information. This impacts users of Shescape that configure their shell to point to a file on disk that is a link to a link. The precise result of being affected depends on the actual shell used and incorrect shell identified by Shescape. This vulnerability is fixed in 2.1.9.