GCVE - cpe:2.3:a:vscode-phpmd_project:vscode-phpmd:*:*:*:*:*:visual_studio

Approved changes feed: RSS · Atom

cpe:2.3:a:vscode-phpmd_project:vscode-phpmd:*:*:*:*:*:visual_studio_code:*:*

part: a version: * update: *

Vendor	Vscode Phpmd Project (`fe212a70-48dc-5dcf-b494-25938f83db9f`)
Product	Vscode Phpmd (`c76a0cd4-91a6-5946-b5f7-dc526634d270`)
Edition	*
Language	*
Software edition	*
Target software	visual_studio_code
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/sandhje/vscode-phpmd`	purl2cpe	2026-06-01 10:14:37.943902

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-30124`	vulnerable	2026-06-08 05:31:46.913577	Details available The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder. Published: 2021-07-29T10:27:18.000Z Updated: 2024-08-03T22:24:59.634Z Open on db.gcve.eu Reference links https://marketplace.visualstudio.com/items?itemName=ecodes.vscode-phpmd https://vuln.ryotak.me/advisories/25 https://github.com/sandhje/vscode-phpmd/commit/c462bf5c6f0160d0199855d5f8ed76be8d9beac0	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.