Spring CLI VSCode Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Spring CLI VSCode Extension: 1 record(s), with affected versions and fixes.

CVE-2026-22718 Medium · 6.8 CWE-78 Jan 14, 2026

Command injection vulnerability

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.