MEDIUM
Shopify
CVE published 2026-08-07
CVE-2026-48122
The Ruby LSP VS Code extension prior to version 0.10.4 has a security issue where several workspace-level settings could be overridden by a malicious repository. This could potentially lead to code execution with the developer's privileges when a malicious repository is opened and trusted. The issue arises from the extension's ability to be configured to use different Ruby executables, version managers, o [truncated]