Threats Tagged 'ghsa-w4hw-qcx7-56pr'
View all threats tagged with 'ghsa-w4hw-qcx7-56pr'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-w4hw-qcx7-56pr'
Click on any threat for detailed analysis and mitigation recommendations
Shescape: Shell injection via unescaped parentheses on Windows with CMD 0 Shescape versions prior to 2.1.14 and versions 3.0.0 up to but not including 3.0.1 on Windows using CMD shell are vulnerable to shell injection via unescaped parentheses. This occurs when using the escape or escapeAll APIs with CMD shell, allowing an attacker to inject commands by exploiting unescaped parentheses in input. The vulnerability has been patched in versions 2.1.14 and 3.0.1. Users are advised to upgrade to these versions or remove parentheses from untrusted inputs as a workaround. Join the discussion | GCVE Database | 07/24/2026, 22:34:23 UTC Added: 07/25/2026, 23:09:13 UTC |
Showing 1 to 1 of 1 result