PT-2021-17920

CVE-2021-28794

Published

2021-03-18

Updated

2022-05-20

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ShellCheck extension for Visual Studio Code version 0.13.3 and earlier

Description: The issue concerns the mishandling of shellcheck.executablePath by the unofficial ShellCheck extension for Visual Studio Code.

Recommendations: For versions prior to 0.13.4, update to version 0.13.4 or later to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾