CVE-2021-28956 | BDVDB-2026-150755 Detail

Description#

The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/glen-84/vscode-sass-lint/releases
https://marketplace.visualstudio.com/items/glen-84.sass-lint/changelog
https://github.com/glen-84/vscode-sass-lint/compare/v1.0.6...v1.0.7
https://vuln.ryotak.me/advisories/1

Exploit#

No public exploit known

History#

Version 12021-03-22Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.