CVE-2021-28789

—

CVSS 3.1

7.8 high

EPSS

2%p76

Published

Mar 18, 2021 (Mar 18, 2021)

Modified

Jun 17, 2026

Description

The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted apple-swift-format.path configuration value that triggers execution upon opening the workspace.

Vendors: apple-swift-format project
Products: apple-swift-format
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.