CVE-2020-1481

High · 8.8

CVSS

8.8

EPSS

23.6%

Published

Jul 14, 2020

CISA due date

—

The record

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.

Affected packages

Ecosystem	Package	Introduced	Fixed