Unrated

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261 First seen on SecPulse Apr 5, 2021

Original description The description as published by the source.

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory github.com
advisory marketplace.visualstudio.com
advisory vuln.ryotak.me
patch github.com

Key facts

Severity: Unrated
Published: Apr 5, 2021
First seen on SecPulse: Apr 5, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54