Vulnerabilities - phpcs - Visual Studio Code | ReversingLabs Spectra Assure Community

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/03/04

All detected vulnerabilities are fixable

Run the update/upgrade command in your package manager to resolve the detected vulnerabilities

CVSS Score

CVE

Summary

Tags

critical

10.0

CVE-2018-3774

url-parse incorrectly parses URLs, leading to potential SSRF, Open Redirect, and Bypass Authentication Protocol vulnerabilities.

Fix Available

critical

9.8

CVE-2018-1000620

Eran Hammer cryptiles has an Insufficient Entropy vulnerability in the randomDigits method.

Fix Available

critical

9.8

CVE-2018-16491

Node.extend is vulnerable to prototype pollution, allowing an attacker to inject arbitrary properties onto Object.prototype.

Exploits Exist

Fix Available

critical

9.8

CVE-2018-16492

Module extend is vulnerable to prototype pollution, allowing an attacker to inject arbitrary properties onto Object.prototype.

Exploits Exist

Fix Available

critical

9.8

CVE-2019-10746

Mixin-deep is vulnerable to Prototype Pollution.

Exploits Exist

Fix Available

critical

9.8

CVE-2019-10747

set-value is vulnerable to Prototype Pollution due to the mixin-deep function allowing modifications of Object.prototype properties.

Exploits Exist

Fix Available

critical

9.8

CVE-2021-23807

jsonpointer is vulnerable to a type confusion vulnerability, allowing bypass of a previous Prototype Pollution fix when pointer components are arrays.

Exploits Exist

Fix Available

critical

9.8

CVE-2021-25949

set-getter is vulnerable to prototype pollution, potentially leading to denial of service and remote code execution.

Exploits Exist

Fix Available

critical

9.8

CVE-2021-3918

json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Exploits Exist

Fix Available

critical

9.8

CVE-2021-44906

Minimist is vulnerable to Prototype Pollution via the setKey function.

Exploits Exist

Fix Available

phpcs

SAFE Assessment

Compliance

Security

Threats

Did you know...