CVE-2022-31180
1 advisory.
npm/shescape CVE-2022-31180: critical 9.8, EPSS 1.99%
Shescape vulnerable to insufficient escaping of whitespace
Action: Upgrade shescape to 1.5.8 or later.
npm i shescape@1.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.5.8 | - |
Fixed versions
| 1.5.8 |
Sources
- osv: GHSA-44vr-rwwj-p88h
- https://github.com/ericcornelissen/shescape/security/advisories/GHSA-44vr-rwwj-p88h
- https://nvd.nist.gov/vuln/detail/CVE-2022-31180
- https://github.com/ericcornelissen/shescape/pull/322
- https://github.com/ericcornelissen/shescape/pull/324
- https://github.com/ericcornelissen/shescape/pull/332
- https://github.com/ericcornelissen/shescape
- https://github.com/ericcornelissen/shescape/releases/tag/v1.5.7
- https://github.com/ericcornelissen/shescape/releases/tag/v1.5.8
CVE-2022-31180 · published · modified · JSON