CVE-2021-26700: Microsoft Npm

High severity, CVSS 7.8. EPSS: 6% chance of exploitation in the next 30 days.

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

Affected products

• Microsoft Npm: before 0.3.15 (fixed in 0.3.15)

Published 2021-02-25. Last modified 2026-06-17.