CVE-2026-22718

Updated on 14 Jan 2026

Severity

6.8 Medium severity

CVSS score: 6.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
CWE ID: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb