Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

ericcornelissen vulnerabilities

15 published CVEs name ericcornelissen among the affected products.

Newest CVEs

  • CVE-2026-73055

    Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox

    ericcornelissen · shescape

    Medium6.3
  • CVE-2026-73414

    Shescape: Shell injection via unescaped parentheses on Windows with CMD

    ericcornelissen · shescape

    Critical9.2
  • CVE-2026-73413

    Shescape: Quadratic-time denial of service in flag-protection

    ericcornelissen · shescape

    High8.7
  • CVE-2026-73412

    Shescape: Path disclosure on Unix with Zsh

    ericcornelissen · shescape

    Medium6.3
  • CVE-2026-73411

    Shescape: Home-directory disclosure in assignment context on Unix with Dash

    ericcornelissen · shescape

    Medium6.3
  • CVE-2026-32094

    Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash

    ericcornelissen · shescape

    Medium6.9
  • CVE-2025-30222

    Shescape has potential environment variable exposure on Windows with CMD

    ericcornelissen · shescape

    Low2.1
  • CVE-2023-40185

    Shescape on Windows escaping may be bypassed in threaded context

    ericcornelissen · shescape

    Medium6.5
  • CVE-2023-35931

    Shescape potential environment variable exposure on Windows with CMD

    ericcornelissen · shescape

    Low3.1
  • CVE-2022-36064

    Shescape Inefficient Regular Expression Complexity vulnerability

    ericcornelissen · shescape

    Medium5.9