Security Advisory

CVE-2021-21384

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-18 23:50:13

Last updated 2024-08-03 18:09:15

Assigner GitHub_M

CVSS score 6.3

State PUBLISHED

Description

shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to defend against shell injection may still be vulnerable against shell injection if the attacker manages to insert a into the payload. For an example see the referenced GitHub Security Advisory. The problem has been patched in version 1.1.3. No further changes are required.

← Browse all CVEs View on cve.org ↗