Turborepo Language Server Protocol vulnerabilities
1 known vulnerability in Turborepo Language Server Protocol from Vercel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
turborepo: Improper Neutralization of Special Elements used in a Command
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command executi