Vulnerabilities - QQ - Visual Studio Code | ReversingLabs Spectra Assure Community

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/08/17

All detected vulnerabilities are fixable

Run the update/upgrade command in your package manager to resolve the detected vulnerabilities

Hide triaged

CVSS Score

CVE Identifier

Summary

Tags

high

8.9

CVE-2026-33228

flatted is vulnerable to prototype pollution via its parse function, allowing an attacker to modify the global prototype.

Exploits Exist

Fix Available

high

8.7

CVE-2024-37890

ws WebSocket client and server for Node.js is vulnerable to a denial-of-service (DoS) attack when handling a request with an excessive number of HTTP headers.

Fix Available

high

7.5

CVE-2026-32141

Flatted's parse function is vulnerable to a stack overflow due to unbounded recursion when resolving circular references in deserialized JSON.

Exploits Exist

Fix Available

high

7.5

CVE-2026-48779

ws WebSocket client and server for Node.js is vulnerable to a memory exhaustion DoS attack via small fragments and data chunks.

Exploits Exist

Fix Available

medium

5.5

CVE-2022-21704

log4js-node has world-readable default file permissions for log files, potentially exposing sensitive information.

Fix Available

QQ

SAFE Assessment

Compliance

Security

Threats

Did you know...