CVE-2021-21415

CVE-2021-21415 concerns the Prisma VS Code extension for Prisma schema files. The vulnerability allows remote code execution when a user has a custom binary path for the Prisma format binary (for example via .vscode/settings.json with prismaFmtBinPath). This binary is executed during auto-formatt...