codefori vulnerabilities

Products

• vscode-ibmi 2

Latest codefori CVEs

Newest publication first

1. CVE-2026-49484 Code for IBM i: Temporary files are visible to all users

   Published 2026-10-12

   Medium·CVSS 5.1

   Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. O...

2. CVE-2026-49483 Code for IBMi: Uses IBM i components with blind check allowing arbitrary code execution

   Published 2026-10-12

   High·CVSS 8.9

   Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Compo...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.