Skip to content
OpenAdvisories

Product · weaveworks

vscode-gitops-tools

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35975

    Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode

    The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCod…

    weaveworks vscode-gitops-tools