CVE-2021-28832: Vim Project Vim

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration.

Affected products

• Vim Project Vim: before 1.19.0 (fixed in 1.19.0)

Published 2021-04-05. Last modified 2026-06-17.