High
CVE-2026-73413
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filters
Medium
CVE-2026-73411
Shescape: Home-directory disclosure in assignment context on Unix with Dash
Critical
CVE-2026-73414
Shescape: Shell injection via unescaped parentheses on Windows with CMD
Medium
CVE-2026-73412
Shescape: Path disclosure on Unix with Zsh
Medium
CVE-2026-32094
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Low
CVE-2025-30222
Shescape has potential environment variable exposure on Windows with CMD
High
CVE-2023-40185
Shescape on Windows escaping may be bypassed in threaded context
Low
CVE-2023-35931
Shescape potential environment variable exposure on Windows with CMD
High
CVE-2022-25918
Inefficient Regular Expression Complexity in shescape
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Medium
CVE-2022-24725
Exposure of home directory through shescape on Unix with Bash
High
CVE-2021-21384
Null characters not escaped
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.