critical9.8
CVE-2021-28794
The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath.
Impact
The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shellcheck Project | Shellcheck | before 0.13.4 |
References
- NVD record
- CVE.org record
- https://github.com/timonwong/vscode-shellcheck/pull/181
- https://github.com/timonwong/vscode-shellcheck/releases/tag/v0.13.4
- https://vuln.ryotak.me/advisories/10
- https://github.com/timonwong/vscode-shellcheck/pull/181
- https://github.com/timonwong/vscode-shellcheck/releases/tag/v0.13.4
- https://vuln.ryotak.me/advisories/10