{"id":"CVE-2021-29261","details":"The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration.","modified":"2026-07-08T05:59:42.115054890Z","published":"2021-04-05T07:15:14.463Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:svelte:svelte:*:*:*:*:*:visual_studio_code:*:*"],"extracted_events":[{"fixed":"104.8.0"}],"source":"CPE_RANGE","vendor_product":"svelte:svelte"},{"source":"DESCRIPTION","extracted_events":[{"fixed":"104.8.0"}]}]},"references":[{"type":"ADVISORY","url":"https://github.com/sveltejs/language-tools/releases"},{"type":"ADVISORY","url":"https://github.com/sveltejs/language-tools/releases/tag/extensions-104.8.0"},{"type":"ADVISORY","url":"https://marketplace.visualstudio.com/items?itemName=svelte.svelte-vscode"},{"type":"ADVISORY","url":"https://vuln.ryotak.me/advisories/3"},{"type":"FIX","url":"https://github.com/sveltejs/language-tools/commit/5d7bf1fd98bfe2cd2080863a3c95ce099b898075"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sveltejs/language-tools","events":[{"introduced":"0"},{"fixed":"5d7bf1fd98bfe2cd2080863a3c95ce099b898075"},{"fixed":"562ccd1373404a4e3fe2439e25fea6b7a314733c"}],"database_specific":{"source":"REFERENCES"}}],"versions":["svelte-check-1.2.6","extensions-104.7.0","svelte-check-1.2.5","extensions-104.6.4","svelte-check-1.2.4","extensions-104.6.3","svelte-check-1.2.3","extensions-104.6.2","svelte-check-1.2.2","extensions-104.6.1","svelte-check-1.2.1","extensions-104.6.0","svelte-check-1.2.0","extensions-104.5.0","svelte-check-1.1.36","extensions-104.4.4","extensions-104.4.3","extensions-104.4.2","svelte-check-1.1.35","svelte-check-1.1.34","extensions-104.4.1","svelte-check-1.1.33","extensions-104.4.0","extensions-104.3.0","svelte-check-1.1.32","svelte-check-1.1.31","extensions-104.2.1","104.1.1","104.1.0","104.0.0","103.0.0","102.8.0","102.7.0","102.6.0","102.5.1","102.5.0","102.4.0","102.3.0","102.2.0","102.1.1","102.1.0","102.0.0","101.14.0","101.13.1","101.13.0","101.12.2","101.12.1","101.12.0","101.11.1","101.11.0","101.10.0","101.9.3","101.9.2","101.9.1","101.9.0","101.8.0","101.7.1","101.7.0","101.6.0","101.5.0","101.4.0","101.3.0","101.2.0","101.1.1","101.1.0","101.0.0","100.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29261.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}