medium6.8
CVE-2026-22718
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.
Impact
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.