0.002 Low
EPSS
Percentile
59.3%
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.
github.com/eclipse/lemminx
github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022
github.com/eclipse/lemminx/issues/1169
github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022
nvd.nist.gov/vuln/detail/CVE-2022-0671