Skip to content
OpenAdvisories

Product · weaveworks

vscode-gitops-tools

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2022-35976

    Improper KubeConfig handling allows arbitrary code execution

    The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are generate…

    weaveworks vscode-gitops-tools