Weaveworks Vscode-Gitops-Tools
2 CVEs affecting Weaveworks Vscode-Gitops-Tools. Latest disclosed: 2022-08-18. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35975 | Critical | 9.0 | 2022-08-18 | The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the mac… |
CVE-2022-35976 | Medium | 5.2 | 2022-08-18 | The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary… |