CVE-2021-30502

Name of the Vulnerable Software and Affected Versions vscode-ghc-simple extension versions prior to 0.2.3

Description The issue allows remote code execution via a crafted workspace configuration with replCommand. This can be exploited by an attacker to execute malicious code.

Recommendations For versions prior to 0.2.3, update to version 0.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the replCommand in workspace configurations until the update is applied.