CVE-2023-35931 — Shescape potential environment variable exposure on Windows with CMD
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.
Published: 2023-06-23 · CVSS: 3.1 · CVSS 3.1
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7