Redhat Vscode-xml — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Vscode-xml, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-0671 — CVSS 9.1 (critical): A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.