CVE-2022-0671

2022-02-1818:15:11

Google

osv.dev

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.

CPENameOperatorVersion
lemminxeq0.16.1
lemminxeq0.8.0
lemminxeq0.18.1
lemminxeq0.15.1
lemminxeq0.11.0
lemminxeq0.7.0
lemminxeq0.3.0
lemminxeq0.16.2
lemminxeq0.0.2
lemminxeq0.18.3

Name	Operator	Version
lemminx	eq	0.16.1
lemminx	eq	0.8.0
lemminx	eq	0.18.1
lemminx	eq	0.15.1
lemminx	eq	0.11.0
lemminx	eq	0.7.0
lemminx	eq	0.3.0
lemminx	eq	0.16.2
lemminx	eq	0.0.2
lemminx	eq	0.18.3

Rows per page:

1-10 of 341

References

github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022

github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022