Approved changes feed: RSS · Atom

cpe:2.3:a:sass_lint_project:sass_lint:*:*:*:*:*:visual_studio_code:*:*

part: a version: * update: *

VendorSass Lint Project (98f517ac-593e-58c9-8076-b397705f535c)
ProductSass Lint (e0f9f344-8b1f-50c7-a186-8e983db5a78d)
Edition*
Language*
Software edition*
Target softwarevisual_studio_code
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/sasstools/sass-lint purl2cpe 2026-06-01 10:13:25.067575
pkg:golang/github.com/sasstools/sass-lint purl2cpe 2026-06-01 10:13:25.067577
pkg:npm/sass-lint purl2cpe 2026-06-01 10:13:25.067578

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28956 vulnerable 2026-06-08 05:31:25.171604 Details available
The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Published: 2021-03-22T06:11:13.000Z
Updated: 2024-08-03T21:55:12.226Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.