What’s Vulnerable › Vulnerabilities

CVE-2021-22195

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-01 · updated 2026-06-17
• Weakness: CWE-427

Description

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system

Affected products

• gitlab-vscode-extension: through 3.15.0

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22195.json
• https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/325
• https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22195.json
• https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/325

Get alerted when CVE-2021-22195 or the next vulnerability affects your stack