VULNRABLE / Vulnerability / GHSA-w4hw-qcx7-56pr
GHSA-w4hw-qcx7-56pr
CRITICAL WATCH shescape GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
Shescape: Shell injection via unescaped parentheses on Windows with CMD
What this means
GHSA-w4hw-qcx7-56pr is a critical-severity vulnerability affecting shescape, rated CVSS 9.5. Published July 25, 2026.
View full advisory at GHSA →