VYPR

Visual Studio Code Python Extension

by Microsoft

CVEs (6)

  • CVE-2020-1481HigJul 14, 2020
    risk 0.59cvss 8.8epss 0.24

    A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.

  • CVE-2024-49050HigNov 12, 2024
    risk 0.57cvss 8.8epss 0.01

    Visual Studio Code Python Extension Remote Code Execution Vulnerability

  • CVE-2026-54981HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  • CVE-2025-49714HigJul 8, 2025
    risk 0.51cvss 7.8epss 0.00

    Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.

  • CVE-2020-17163HigDec 29, 2023
    risk 0.51cvss 7.8epss 0.01

    Visual Studio Code Python Extension Remote Code Execution Vulnerability

  • CVE-2021-27081HigMar 11, 2021
    risk 0.51cvss 7.8epss 0.04

    Visual Studio Code ESLint Extension Remote Code Execution Vulnerability