@theia/debug (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c), @theia/plugin-dev (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c) +4 more potentially affected by CVE-2021-28161 via @theia/console (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c)

@theia/console NPM version =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.8.0-next.fea40a2c Source cves: CVE-2021-28161 Source advisory: OSV:GHSA-CWG9-C9CR-P5FQ...

@theia/plantuml (>=0.1.2, <=0.1.7), @theia/plugin-dev (>=0.9.0-next.d57c6a91, <=0.13.0-next.fb398d67) +6 more potentially affected by CVE-2019-17636 via @theia/mini-browser (>=0.3.19, <=0.16.0-next.f114ded2)

@theia/mini-browser NPM version =0.3.19, =0.1.2, =0.9.0-next.d57c6a91, =0.9.0-next.d57c6a91, =0.9.0-next.d57c6a91, =0.13.0-next.0860ab1b, =0.3.14, =0.0.4, =0.0.33 - coffee-workflow-analyzer 1.0.1 Source cves: CVE-2019-17636 Source advisory: GHSA-F7VX-J8MP-3H2X...

@theia/plantuml (>=0.1.2, <=0.1.7), @theia/plugin-dev (>=0.9.0-next.d57c6a91, <=0.13.0-next.fb398d67) +6 more potentially affected by CVE-2019-17636 via @theia/mini-browser (>=0.3.19, <=0.16.0-next.f114ded2)

@theia/mini-browser NPM version =0.3.19, =0.1.2, =0.9.0-next.d57c6a91, =0.9.0-next.d57c6a91, =0.9.0-next.d57c6a91, =0.13.0-next.0860ab1b, =0.3.14, =0.0.4, =0.0.33 - coffee-workflow-analyzer 1.0.1 Source cves: CVE-2019-17636 Source advisory: OSV:GHSA-F7VX-J8MP-3H2X...

vscode-glsllint security vulnerabilities

vscode-glsllint is an unofficial VSCode extension for open source. The extension supports lint's GLS OpenGL Shading Language. It uses the OpenGL and OpenGL ES shader validators to validate each shader type supported by glslangValidator. A security vulnerability exists in vscode-glsllint versions...

vscode-rufo code execution vulnerability

vscode-rufo is a Visual Studio code through Rufo provides formatting extensions to the application. A code execution vulnerability exists in vscode-rufo in versions prior to 0.0.4, which can be exploited by an attacker to execute arbitrary code on a system...

Code injection

vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...

CVE-2021-21420

vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...

CVE-2021-21420

CVE-2021-21420 affects the vscode-stripe extension for Visual Studio Code. The vulnerability arises when the extension loads an untrusted repository containing malicious settings, allowing an attacker to execute arbitrary code in the context of the current user. The available documentation states...

CVE-2021-22195

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...

Code injection

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...

CVE-2021-22195

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...

CVE-2021-22195

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...

CVE-2021-22195

CVE-2021-22195 affects the GitLab VSCode extension (gitlab-vscode-extension) v3.15.0 and earlier. It enables client-side code execution, allowing an attacker to run code on the user’s system. The connected documents corroborate vulnerable component and impact but do not provide exploit steps, spe...

CVE-2021-22195: Uncontrolled Search Path Element

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...

PT-2021-14906

Name of the Vulnerable Software and Affected Versions: gitlab-vscode-extension versions 3.15.0 and earlier Description: The issue allows for client-side code execution, enabling an attacker to execute code on a user's system. Recommendations: For gitlab-vscode-extension versions 3.15.0 and earlie...

GitLab gitlab-vscode-extension code issues and vulnerabilities

Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...

CVE-2021-21420: Improper Neutralization of Special Elements in Output Used by a Downstream Component

vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...

CVE-2021-29658

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...

CVE-2021-29658

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...

CVE-2021-29658

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder...