High severity7.8NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026
CVE-2021-28470
CVE-2021-28470
Description
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
Affected products
3- cpe:2.3:a:microsoft:visual_studio_code_github_pull_requests_and_issues:*:*:*:*:*:*:*:*Range: <0.25.1
cpe:2.3:a:microsoft:visual_studio_code_github_pull_requests_and_issues_extension:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:visual_studio_code_github_pull_requests_and_issues_extension:-:*:*:*:*:*:*:*range: 0.1.1
- (no CPE)
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28470nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.