Shescape vulnerabilities
We track 1 vulnerability in Shescape products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Shescape vulnerabilities
- 7.5 High severity
shescape: Inefficient Regular Expression Complexity
The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the escape function in index.js, due to the usage of insecure regex in the escapeArgBash function.