CVE-2021-28956

ALTO 8.8CVE-2021-28956 · Published 22/03/2021 · updated 17/06/2026

In breve

CVE-2021-28956 è una vulnerabilità ALTO (CVSS 8.8) che riguarda sass lint (sass lint project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 75.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sass lint sass_lint_project	`≤ 1.0.7`	No fix yet

Description

The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

glen-84/vscode-sass-lint · Patch
glen-84/vscode-sass-lint release · Release Notes
marketplace.visualstudio.com/items/glen-84.sass-lint/changelog · Release Notes
vuln.ryotak.me/advisories/1 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free