GitHub advisory GHSA-vm9q-mf35-jwpx

OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

CVE(s)

CVE-2026-89116

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

Open advisory on GitHub