vscode-gitops-tools vulnerabilities

2 known vulnerabilities in vscode-gitops-tools from Weaveworks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  vscode-gitops-tools: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-35976Aug 18, 2022Weaveworks

  The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are generated

• 9.8 Critical severity

  vscode-gitops-tools: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-35975Aug 18, 2022WeaveworksEPSS 1.41%

  The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCode