Vulnerability CVE-2023-35931
Published: 2023-06-23

Description:
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.

Type:

CWE-526

 (Information Exposure Through Environmental Variables)

 References:
https://github.com/ericcornelissen/shescape/pull/982
https://github.com/ericcornelissen/shescape/commit/d0fce70f987ac0d8331f93cb45d47e79436173ac
https://github.com/ericcornelissen/shescape/security/advisories/GHSA-3g7p-8qhx-mc8r
https://github.com/ericcornelissen/shescape/releases/tag/v1.7.1
Copyright 2026, cxsecurity.com

 

Back to Top