formulahendry / formulahendry/vscode-code-runner
[Bug] CVE-2025-65715
Open
- Dominant language
- TypeScript
- Stars
- 2.4k
- Forks
- 351
- PR merge metrics
- No merged PRs in 30d
Description
This CVE has been out for a while, are there any plans to update the extension and address this?
https://nvd.nist.gov/vuln/detail/CVE-2025-65715
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading the CVE-2025-65715 record linked in the issue and determine which part of the VS Code extension is affected. Trace that component through the repository and identify the relevant validation or dependency checks. Done means the reported vulnerability is addressed and the affected behavior is verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript, vscode
- Domain
- devtools, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100