Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2023-35931

Shescape potential environment variable exposure on Windows with CMD

Description

Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ericcornelissen shescape

  • < 1.7.1affected

References