Vulnerabilities

TI-2021-04513 CVE-2021-21415

Visual Studio Code Prisma Extension Remote Code Execution Vulnerability

LOW 38

Prisma VS Code a VSCode extension for Prisma schema files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02098 Published 2021-04-29 Fixed in 2.20.0, 20.0.27 CWE-94

TI-2021-04512 CVE-2021-21414 · GHSA-pxcc-hj8w-fmm7

LOW 38

Prisma is an open source ORM for Node.js & TypeScript.

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.02073 Published 2021-04-29 Fixed in 2.20.0 CWE-78

TI-2020-03527 CVE-2020-4038 · GHSA-4852-vrh7-28rf

MEDIUM 43

GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.07243 Published 2020-06-08 Fixed in 1.6.22 CWE-79