Ericcornelissen vulnerabilities
We track 6 vulnerabilities in Ericcornelissen products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2026.
Latest Ericcornelissen vulnerabilities
- 9.2 Critical severity
shescape: Improper Neutralization of Special Elements used in an OS Command
Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cmd.js does not escape `(` and `)` when applications use the escape or escapeAll APIs on Windows with shell set to cmd.exe, or with shell
- 8.7 High severity
shescape: Uncontrolled Resource Consumption
Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making
- 8.6 High severity
shescape: Improper Neutralization of Escape, Meta, or Control Sequences
shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping (or quoting) for the wrong shell, thus allowing attackers to bypass protections
- 7.5 High severity
shescape: Inefficient Regular Expression Complexity
Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts users that use Shescape to escape arguments for the Unix shells `Bash` and `Dash`, or any not-officially-supported Unix shell; and/or using th
- 9.8 Critical severity
shescape: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the `escape` or `escapeAll` functions with the `interpolation`
- 9.8 Critical severity
shescape: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts users that use Shescape (any API function) to escape arguments for cmd.exe on Windows An attacker can omit all