CVE-2021-29261

7.8

HIGHCVSS v3

Published

April 5, 2021

CVSS v2

6.8 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration.

svelte

NPMCybernetically enhanced web apps

< 104.8.0NVD

sveltejs/language-tools

GitHubThe Svelte Language Server, and official extensions which use it

NVD

@storybook/svelte

NPM

More on this CVE

NVD↗GitHub Advisory↗

Storybook Svelte renderer: Develop, document, and test UI components in isolation.

< 104.8.0NVD

sveltejs/svelte

GitHubweb development for the rest of us

< 104.8.0NVD

svelte

RubyGemsThis gem consumes a Swagger API json file and maps the API into easy-to-use Ruby objects

< 104.8.0NVD

notonthehighstreet/svelte

GitHubDynamic Ruby API Client from Swagger JSON Spec

< 104.8.0NVD

Security Advisories

CVE-2021-29261

Description

More on this CVE