8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.3%
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.
github.com/eclipse/lemminx/blob/master/CHANGELOG.md
github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md