← All advisories

High severity7.8NVD Advisory· Published Feb 25, 2021· Updated Jun 17, 2026

CVE-2021-26700

CVE-2021-26700

Description

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
vscode-npm-scriptnpm	>= 0.0.0	—

Affected products

2

Microsoft/Visual Studio Code CoPilot Chat Extensioncpe-rescue
cpe:2.3:a:microsoft:visual_studio_code_npm-script_extension:*:*:*:*:*:*:*:*
Range: 0.1.0
ghsa-coords
pkg:npm/vscode-npm-script
Range: >= 0.0.0

Patches

Vulnerability mechanics

References

3

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26700nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-r84v-qff8-jv5gghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-26700ghsaADVISORY

News mentions

0

No linked articles in our index yet.