← All advisories

Important severity8.8NVD Advisory· Published Jun 29, 2026

vscode-java: vscode: Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension

CVE-2026-12856

Description

vscode-java: vscode: Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension

Affected products

2

Eclipse/Vscode Javainferred
Vscode Java/vscode-javallm-create

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.