Unrated
VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration.
CVE-2021-28832
First seen on SecPulse
References
- advisory marketplace.visualstudio.com
- advisory vuln.ryotak.me
- patch github.com