Approved changes feed: RSS · Atom

cpe:2.3:a:continue:continue:*:*:*:*:*:visual_studio_code:*:*

part: a version: * update: *

VendorContinue (83c37714-b414-52c9-aad9-272552b9444e)
ProductContinue (9b3ab72e-6a1c-5ab1-b369-4e2ea40943f5)
Edition*
Language*
Software edition*
Target softwarevisual_studio_code
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8770 vulnerable 2026-06-08 08:08:58.623503 continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal
LOW (3.3)
A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component JSON-RPC Server. Such manipulation of the argument dirPath leads to path traversal. An attack has to be approached locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-17T23:15:15.257Z
Updated: 2026-05-18T19:53:49.716Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.