The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-28953.json"