Approved changes feed: RSS · Atom
cpe:2.3:a:stripe:stripe:*:*:*:*:*:visual_studio_code:*:*
part: a version: * update: *
| Vendor | Stripe (c0f377f2-71e2-5eef-93e6-7496f7ba7f14) |
|---|---|
| Product | Stripe (ec7fcad0-ec19-5bf2-833c-c8fbe13c9c2c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | visual_studio_code |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/stripe/vscode-stripe |
purl2cpe | 2026-06-01 10:12:31.353379 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-21420 |
vulnerable | 2026-06-08 05:29:11.992237 |
Vulnerability in Stripe for Visual Studio Code < 1.7.3
HIGH (7.5)
vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. The update addresses the vulnerability by modifying the way the extension validates its settings.
Published: 2021-04-01T21:40:10.000Z
Updated: 2024-08-03T18:09:16.106Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.