A high severity vulnerability in the shescape library allows an unauthenticated attacker to cause a denial of service via resource exhaustion.

This vulnerability involves uncontrolled resource consumption and inefficient algorithmic complexity (CWE-400, CWE-407). It can be triggered by an unauthenticated attacker, potentially leading to application instability or service failure.

Successful exploitation results in a denial of service, which can render applications relying on the shescape library unavailable. With a CVSS score of 8.7, this represents a significant risk to business continuity, especially for services that require high availability.

Immediate Action: Update the shescape package to version 2.1.14 or 3.0.1 immediately.

Proactive Monitoring: Monitor server CPU and memory usage patterns for spikes that correlate with unusual input processing.

Compensating Controls: Implement rate limiting and input validation at the application layer to mitigate the impact of malicious payloads before they reach the library.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the potential for service disruption, administrators should prioritize updating the shescape library. Patching is the only effective way to resolve the underlying algorithmic inefficiency.