CVE-2021-30502

CRITICAL 9.8CVE-2021-30502 · Published 25/04/2021 · updated 17/06/2026

In short

CVE-2021-30502 is a CRITICAL (CVSS 9.8) vulnerability affecting simple glasgow haskell compiler (simple glasgow haskell compiler project).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
Fix: update to 0.2.3 or later.

Package	Affected versions	Patched versions
simple glasgow haskell compiler simple_glasgow_haskell_compiler_project	`< 0.2.3`	`0.2.3`

Description

The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand.

References

dramforever/vscode-ghc-simple · Release Notes
dramforever/vscode-ghc-simple commit bc7f6f0 · Patch
dramforever/vscode-ghc-simple release · Release Notes
vuln.ryotak.me/advisories/38 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free