SH
Product
Shescape
by Shescape Project · last CVE Mar 11, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch

Add Shescape to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40185
8.6
1%
Aug 23
Shescape on Windows escaping may be bypassed in threaded context
Affected: before 1.7.4
CVE-2021-21384
7.8
1%
Mar 19
shescape is a simple shell escape package for JavaScript
Affected: before 1.1.3
CVE-2022-25918
7.5
2%
Oct 27
Regular Expression Denial of Service (ReDoS)
Affected: 1.5.10; 1.6.0
CVE-2022-36064
7.5
1%
Sep 6
Shescape is a shell escape package for JavaScript
Affected: 1.5.1 before 1.5.10
Showing 4