dotnet / dotnet/vscode-csharp

Command Injection issue in processPicker.ts

Open
#6,414 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
3.1k
Forks
737
Avg merge
17h 56m
Merged PRs (30d)
21

Description

## Environment data
I used Fortify_SCA 22.2.2 to scan vscode-csharp 1.23.11

## Scan results
Sink Location: src/features/processPicker.ts:504
Code Snippet:
// Execute the process with proper command and arguments
execFile(command, args, { cwd: workingDirectory, maxBuffer: 500 * 1024 }, (error: Error | null, stdout: string, stderr: string) => {
if (error) {
reject(error);

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.