CVE-2021-28470: Microsoft Visual Studio Code GitHub Pull Requests And Issues

High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Affected products

• Microsoft Visual Studio Code GitHub Pull Requests And Issues: before 0.25.1 (fixed in 0.25.1)

Published 2021-04-13. Last modified 2026-06-17.