Skip to content
OpenAdvisories

Vendor

prisma

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.8

    Visual Studio Code Prisma Extension Remote Code Execution Vulnerability

    Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settin…

  • High 7.7

    Command injection vulnerability in @prisma/sdk in getPackedPackage function

    Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the `@prisma/sdk` package who are affected by this security vulnerability. This issue may lead to remote code execution if a clie…