npm/shescape CVE-2022-24725: medium 5.5, EPSS 0.50%
Exposure of home directory through shescape on Unix with Bash
Action: Upgrade shescape to 1.5.1 or later.
npm i shescape@1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GHSA-446w-rrm4-r47f
- https://github.com/ericcornelissen/shescape/security/advisories/GHSA-446w-rrm4-r47f
- https://nvd.nist.gov/vuln/detail/CVE-2022-24725
- https://github.com/ericcornelissen/shescape/issues/169
- https://github.com/ericcornelissen/shescape/pull/170
- https://github.com/ericcornelissen/shescape
CVE-2022-24725 · published · modified · JSON