Vulnerabilities - PHP Debug - Visual Studio Code | ReversingLabs Spectra Assure Community

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/07/18

Hide triaged

CVSS Score

CVE Identifier

Summary

Tags

critical

9.8

CVE-2021-44906

Minimist is vulnerable to Prototype Pollution via the setKey function.

Exploits Exist

Fix Available

critical

9.8

CVE-2022-37616

xmldom is vulnerable to prototype pollution via the copy function in dom.js.

critical

9.8

CVE-2022-39353

xmldom parses XML with multiple top-level elements, potentially leading to issues for dependents.

Exploits Exist

high

8.7

CVE-2026-26996

minimatch is vulnerable to Regular Expression Denial of Service (ReDoS) via glob patterns with consecutive * wildcards.

Exploits Exist

Fix Available

high

8.7

CVE-2026-41672

xmldom allows attacker-controlled comment content to be serialized into XML without validation, enabling arbitrary XML node injection.

high

8.7

CVE-2026-41673

xmldom is vulnerable to a denial-of-service (DoS) attack due to uncontrolled recursion in XML serialization.

high

8.7

CVE-2026-41674

xmldom is vulnerable to XML injection through unvalidated DocumentType serialization.

high

8.7

CVE-2026-41675

xmldom allows attacker-controlled processing instruction data to be serialized into XML, enabling arbitrary XML node injection.

high

7.5

CVE-2022-24785

Moment.js is vulnerable to a path traversal vulnerability when a user-provided locale string is directly used to switch moment locale.

Exploited by Malware

Exploits Exist

Fix Available

high

7.5

CVE-2022-31129

Moment.js is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient parsing algorithm.

Exploits Exist

Fix Available

PHP Debug

SAFE Assessment

Compliance

Security

Threats

Did you know...