{"uuid": "55953aff-74ab-4c8a-81e2-f8618c89638a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73055", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117102243668854766", "content": "CVE-2026-73055: CRITICAL vuln in ericcornelissen shescape (&lt;2.1.15, 3.0.0&lt;3.0.2). Improper tilde (~) escaping lets attackers leak home dir &amp; alter cmd targets on BusyBox /bin/sh. Avoid untrusted input in escape APIs. Patch pending. https://radar.offseq.com/threat/cve-2026-73055-improper-encoding-or-escaping-of-output-in-ericcornelissen-shescape-3ef90f5f16672f7b #OffSeq #CVE202673055 #infosec", "creation_timestamp": "2026-08-16T00:00:39.624679Z"}