Malicious code in teamcity-vscode-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781a5dd1bb7862e67510806bbe291457f580ad23f355ce15952e1831cd9753ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6441 Malicious code in teamcity-vscode-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781a5dd1bb7862e67510806bbe291457f580ad23f355ce15952e1831cd9753ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6975 Malicious code in vscode-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3774 Malicious code in identity-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d7563819f33fd96fcc6cfdbb40434f9ba5fd41b63c990af654c1fd5ba100611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-bicep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211da03238882a9c08d94528e34ba710469e3288e553316948c5a33a52bab9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6972 Malicious code in vscode-bicep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211da03238882a9c08d94528e34ba710469e3288e553316948c5a33a52bab9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5400 Malicious code in polaris-for-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-for-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-R84V-QFF8-JV5G Remote code execution in vscode-npm-script

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

GHSA-52VV-3VF7-F7WH Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

CVE-2022-0671

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

CVE-2022-0671

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

Server side request forgery (ssrf)

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

CVE-2022-0671

The connected sources confirm a vulnerability in vscode-xml prior to version 0.19.0 where downloading a schema can trigger blind SSRF or DoS via a large file. Affected component is the vscode-xml schema download/processing path; root cause is improper handling of externally downloaded schema data...

CVE-2022-0671

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

CVE-2022-0671

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

Red Hat Vscode-Xml 代码问题漏洞

Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. A code issue vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in vcode -xml in versions prior to 0.19.0. An attacker could exploit this vulnerabilit...

Red Hat Vscode-Xml 信息泄露漏洞

Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. An information disclosure vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in versions of LemMinX prior to 0.19.0. An attacker could use this...