CVE-2022-31179
1 advisory.
npm/shescape CVE-2022-31179: high 8.1
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Action: Upgrade shescape to 1.5.8 or later.
npm i shescape@1.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.8 | - |
Fixed versions
| 1.5.8 |
Sources
- osv: GHSA-jjc5-fp7p-6f8w
- https://github.com/ericcornelissen/shescape/security/advisories/GHSA-jjc5-fp7p-6f8w
- https://nvd.nist.gov/vuln/detail/CVE-2022-31179
- https://github.com/ericcornelissen/shescape/pull/332
- https://github.com/ericcornelissen/shescape/commit/aceea7358f7222984e21260381ebc5ec4543b76f
- https://github.com/ericcornelissen/shescape
- https://github.com/ericcornelissen/shescape/releases/tag/v1.5.8
CVE-2022-31179 · published · modified · JSON