Skip to content
OpenAdvisories

Product · Wiz

Wiz Code Visual Studio Code extension

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2024-9145

    Local command injection in Wiz Code Visual Studio Code extension

    Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path th…

    Wiz Wiz Code Visual Studio Code extension