Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/shelljs@0.8.5
purl pkg:npm/shelljs@0.8.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-47yb-hwjg-17gu Improper Privilege Management in shelljs Output from the synchronous version of `shell.exec()` may be visible to other users on the same system. You may be affected if you execute `shell.exec()` in multi-user Mac, Linux, or WSL environments, or if you execute `shell.exec()` as the root user. Other shelljs functions (including the asynchronous version of `shell.exec()`) are not impacted. GHSA-64g7-mvw6-v9qj
GMS-2022-11
VCID-xdhu-hqjw-gkbr shelljs is vulnerable to Improper Privilege Management CVE-2022-0144
GHSA-4rq4-32rv-6wp6

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:17:28.055806+00:00 GHSA Importer Fixing VCID-xdhu-hqjw-gkbr https://github.com/advisories/GHSA-4rq4-32rv-6wp6 38.6.0
2026-06-05T21:17:18.733808+00:00 GHSA Importer Fixing VCID-47yb-hwjg-17gu https://github.com/advisories/GHSA-64g7-mvw6-v9qj 38.6.0
2026-06-04T17:46:57.096841+00:00 GithubOSV Importer Fixing VCID-xdhu-hqjw-gkbr https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-4rq4-32rv-6wp6/GHSA-4rq4-32rv-6wp6.json 38.6.0
2026-06-04T17:46:56.121024+00:00 GithubOSV Importer Fixing VCID-47yb-hwjg-17gu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-64g7-mvw6-v9qj/GHSA-64g7-mvw6-v9qj.json 38.6.0
2026-06-02T04:40:58.795149+00:00 GitLab Importer Fixing VCID-47yb-hwjg-17gu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/shelljs/GMS-2022-11.yml 38.6.0
2026-06-02T04:40:55.957567+00:00 GitLab Importer Fixing VCID-xdhu-hqjw-gkbr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/shelljs/CVE-2022-0144.yml 38.6.0