ericcornelissen vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20224
4. 20232
5. 20251
6. 20266

Newest CVEs

• CVE-2026-73055

  Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox

  ericcornelissen · shescape

  Medium6.3
• CVE-2026-73414

  Shescape: Shell injection via unescaped parentheses on Windows with CMD

  ericcornelissen · shescape

  Critical9.2
• CVE-2026-73413

  Shescape: Quadratic-time denial of service in flag-protection

  ericcornelissen · shescape

  High8.7
• CVE-2026-73412

  Shescape: Path disclosure on Unix with Zsh

  ericcornelissen · shescape

  Medium6.3
• CVE-2026-73411

  Shescape: Home-directory disclosure in assignment context on Unix with Dash

  ericcornelissen · shescape

  Medium6.3
• CVE-2026-32094

  Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash

  ericcornelissen · shescape

  Medium6.9
• CVE-2025-30222

  Shescape has potential environment variable exposure on Windows with CMD

  ericcornelissen · shescape

  Low2.1
• CVE-2023-40185

  Shescape on Windows escaping may be bypassed in threaded context

  ericcornelissen · shescape

  Medium6.5
• CVE-2023-35931

  Shescape potential environment variable exposure on Windows with CMD

  ericcornelissen · shescape

  Low3.1
• CVE-2022-36064

  Shescape Inefficient Regular Expression Complexity vulnerability

  ericcornelissen · shescape

  Medium5.9