https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 23:33:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-45912 cnvd-2019-45912 https://cve.radiocsirt.org/vuln/cnvd-2019-45912 https://cve.radiocsirt.org/vuln/euvd-2026-57950 EUVD-2026-57950 https://cve.radiocsirt.org/vuln/euvd-2026-57950 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16765 <p>If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker&#39;s choosing may be executed on the user&#39;s behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to this version using Visual Studio Code Marketplace&#39;s upgrade mechanism. After upgrading, the codeQL.cli.executablePath setting can only be set in the per-user settings, and not in the per-workspace settings. More information about VS Code settings can be found here.</p> <p>If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker&#39;s choosing may be executed on the user&#39;s behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to this version using Visual Studio Code Marketplace&#39;s upgrade mechanism. After upgrading, the codeQL.cli.executablePath setting can only be set in the per-user settings, and not in the per-workspace settings. More information about VS Code settings can be found here.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-16765 https://cve.radiocsirt.org/vuln/ghsa-x3w4-7cmr-9gv2 <p>If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker&#39;s choosing may be executed on the user&#39;s behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to this version using Visual Studio Code Marketplace&#39;s upgrade mechanism. After upgrading, the codeQL.cli.executablePath setting can only be set in the per-user settings, and not in the per-workspace settings. More information about VS Code settings can be found here.</p> <p>If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker&#39;s choosing may be executed on the user&#39;s behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to this version using Visual Studio Code Marketplace&#39;s upgrade mechanism. After upgrading, the codeQL.cli.executablePath setting can only be set in the per-user settings, and not in the per-workspace settings. More information about VS Code settings can be found here.</p> https://cve.radiocsirt.org/vuln/ghsa-x3w4-7cmr-9gv2 https://cve.radiocsirt.org/vuln/gsd-2019-16765 gsd-2019-16765 https://cve.radiocsirt.org/vuln/gsd-2019-16765