Eericcornelissen

Products

Exploited and recent CVEs

• CVE-2026-73055 Medium 4.8 Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox 0.4%
• CVE-2026-73414 Critical 9.2 Shescape: Shell injection via unescaped parentheses on Windows with CMD 0.9%
• CVE-2026-73413 High 8.7 Shescape: Quadratic-time denial of service in flag-protection 0.6%
• CVE-2026-73412 Medium 6.3 Shescape: Path disclosure on Unix with Zsh 0.6%
• CVE-2026-73411 Medium 6.3 Shescape: Home-directory disclosure in assignment context on Unix with Dash 0.6%
• CVE-2026-32094 Medium 6.9 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash 0.3%
• CVE-2025-30222 Low 2.1 Shescape has potential environment variable exposure on Windows with CMD 0.2%
• CVE-2023-40185 Medium 6.5 Shescape on Windows escaping may be bypassed in threaded context 0.7%
• CVE-2023-35931 Low 3.1 Shescape potential environment variable exposure on Windows with CMD 0.8%
• CVE-2022-36064 Medium 5.9 Shescape Inefficient Regular Expression Complexity vulnerability 1.5%
• CVE-2022-31179 High 8.1 Insufficient escaping of line feeds for CMD in shescape 1.4%
• CVE-2022-31180 Critical 9.8 Insufficient escaping of whitespace in shescape 2.0%
• CVE-2022-24725 Medium 6.2 Exposure of home directory through shescape on Unix with Bash 0.5%
• CVE-2021-21384 Medium 6.3 Null characters not escaped in shescape 0.6%
• CVE-2020-15272 High 8.7 Shell-injection in git-tag-annotation GitHub action 1.2%