High severity7.8NVD Advisory· Published Nov 28, 2023· Updated Jun 17, 2026

CVE-2023-46944

Description

An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitKraken/GitLens2 versions
cpe:2.3:a:gitkraken:gitlens:*:*:*:*:*:visual_studio_code:*:*+ 1 more
- cpe:2.3:a:gitkraken:gitlens:*:*:*:*:*:visual_studio_code:*:*range: <14.0.0
- (no CPE)
GitKraken/vscode-gitlensllm-create
Range: <14.0.0

Patches

Vulnerability mechanics

References

github.com/gitkraken/vscode-gitlens/commit/ee2a0c42a92d33059a39fd15fbbd5dd3d5ab6440nvdPatch
www.sonarsource.com/blog/vscode-security-markdown-vulnerabilities-in-extensions/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000