CVE-2022-24725

Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when using Bash with the `escape` or `escapeAll` functions from the _shescape_ API with the `interpolation` option set to `true`. Other tested shells, Dash and Zsh, are not affected. Depending on how the output of _shescape_ is used, directory traversal may be possible in the application using _shescape_. The issue was patched in version 1.5.1. As a workaround, manually escape all instances of the tilde character (`~`) using `arg.replace(/~/g, "\\~")`.

• CWE-200
• CWE-78

• https://github.com/ericcornelissen/shescape/issues/169Exploit, Issue Tracking, Third Party Advisory
• https://github.com/ericcornelissen/shescape/pull/170Patch, Third Party Advisory
• https://github.com/ericcornelissen/shescape/security/advisories/GHSA-446w-rrm4-r47fExploit, Third Party Advisory
• https://github.com/ericcornelissen/shescape/issues/169Exploit, Issue Tracking, Third Party Advisory
• https://github.com/ericcornelissen/shescape/pull/170Patch, Third Party Advisory
• https://github.com/ericcornelissen/shescape/security/advisories/GHSA-446w-rrm4-r47fExploit, Third Party Advisory

Published

Mar 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2472Improper Initialization vulnerability in the local server co…5.5
• CVE-2022-24720image_processing is an image processing wrapper for libvips …9.8
• CVE-2022-24721CometD is a scalable comet implementation for web messaging.…8.1
• CVE-2022-24722VIewComponent is a framework for building view components in…6.1
• CVE-2022-24723URI.js is a Javascript URL mutation library. Before version …5.3
• CVE-2022-24724cmark-gfm is GitHub's extended version of the C reference im…9.8
• CVE-2022-24726Istio is an open platform to connect, manage, and secure mic…7.5
• CVE-2022-24727Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-24728CKEditor4 is an open source what-you-see-is-what-you-get HTM…5.4
• CVE-2022-24729CKEditor4 is an open source what-you-see-is-what-you-get HTM…7.5
• CVE-2022-2473The WP-UserOnline plugin for WordPress is vulnerable to Stor…4.8
• CVE-2022-24730Argo CD is a declarative, GitOps continuous delivery tool fo…6.5