CVE-2026-48122

CVE-2026-48122 affects the Ruby LSP VS Code extension (prior to 0.10.4). A repo containing a .vscode/settings.json could override startup paths for the Ruby executable, version manager executables, or the Bundler Gemfile, causing code to run with the developer’s privileges when the repository is ...

CVE-2026-46508

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command execution for Turborepo daemon commands and...

PT-2026-41314

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command execution for Turborepo daemon commands and...