shescape@1.7.1 vulnerabilities

simple shell escape library

Direct Vulnerabilities

Known vulnerabilities in the shescape package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Improper Neutralization

shescape is a simple shell escape library

Affected versions of this package are vulnerable to Improper Neutralization due to possible escaping the wrong shell, thus allowing attackers to bypass protections. Note: you are only vulnerable if you are using this package on Windows in a threaded context.

How to fix Improper Neutralization?

Upgrade shescape to version 1.7.4 or higher.

<1.7.4