6.8
Medium
CVE-2026-22718 The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users…
Description
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CLI VSCode Extension | Versions not published |