Approved changes feed: RSS · Atom

cpe:2.3:a:stripe:vscode-stripe:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStripe (c0f377f2-71e2-5eef-93e6-7496f7ba7f14)
ProductVscode Stripe (774973ee-f87d-50a7-8f4e-c42e7d2f794e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21420 vulnerable 2026-06-08 05:29:11.991462 Vulnerability in Stripe for Visual Studio Code < 1.7.3
HIGH (7.5)
vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. The update addresses the vulnerability by modifying the way the extension validates its settings.
Published: 2021-04-01T21:40:10.000Z
Updated: 2024-08-03T18:09:16.106Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.