What’s Vulnerable › Vulnerabilities

CVE-2020-13279

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-22 · updated 2026-06-17
• Weakness: CWE-427

Description

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system

Affected products

• gitlab-vscode-extension: through 2.2.0

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json
• https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json
• https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170

Get alerted when CVE-2020-13279 or the next vulnerability affects your stack