CVE-2025-30222
1 advisory.
npm/shescape CVE-2025-30222: low
Shescape has potential environment variable exposure on Windows with CMD
Action: Upgrade shescape to 2.1.2 or later.
npm i shescape@2.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.2 | 2.1.2 | - |
Fixed versions
| 2.1.2 |
Sources
- osv: GHSA-66pp-5p9w-q87j
- https://github.com/ericcornelissen/shescape/security/advisories/GHSA-66pp-5p9w-q87j
- https://nvd.nist.gov/vuln/detail/CVE-2025-30222
- https://github.com/ericcornelissen/shescape/pull/1916
- https://github.com/ericcornelissen/shescape/commit/0a81f1eb077bab8caae283a2490cd7be9af179c6
- https://github.com/ericcornelissen/shescape
- https://github.com/ericcornelissen/shescape/releases/tag/v2.1.2
CVE-2025-30222 · published · modified · JSON