CVE-2023-35931
Shescape potential environment variable exposure on Windows with CMD
Summary
Shescape potential environment variable exposure on Windows with CMD
Original description
The description as published by the source.
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com