MediumCVSS 6.8
EPSS 0.58%
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.