Skip to content

CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2021-02-25
Updated: 2024-08-03
Assigning organization: microsoft

Description

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Visual Studio Code - npm-script Extension

0.1.0 to < publicationaffected

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26700 ↗