CVE-2021-29261

Published April 5th, 2021

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration.

sveltejs/language-tools

The Svelte Language Server, and official extensions which use it

GitHub

1.43K