GCVE - cpe:2.3:a:swift_development_environment_project:swift_development_environment:*:*:*:*:*:visual_studio

Approved changes feed: RSS · Atom

cpe:2.3:a:swift_development_environment_project:swift_development_environment:*:*:*:*:*:visual_studio_code:*:*

part: a version: * update: *

Vendor	Swift Development Environment Project (`a3ee2713-5022-572b-9d63-a366031f93ed`)
Product	Swift Development Environment (`970e74d7-b8b0-547c-a4b1-aabe12d2daa2`)
Edition	*
Language	*
Software edition	*
Target software	visual_studio_code
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-28792`	vulnerable	2026-06-08 05:31:24.871796	Details available The unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite, swift.path.sourcekiteDockerMode, swift.path.swift_driver_bin, or swift.path.shell configuration value that triggers execution upon opening the workspace. Published: 2021-03-18T15:04:47.000Z Updated: 2024-08-03T21:55:11.533Z Open on db.gcve.eu Reference links https://github.com/vknabel/vscode-swift-development-environment/releases/tag/2.12.1 https://vuln.ryotak.me/advisories/14	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.