{"api_version":"v1","generated_at":"2026-10-01T06:15:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-microsoft-visual-studio-code-github-pull-requests-and-issues-extension-2efeaab0688c","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Visual Studio Code - GitHub Pull Requests and Issues Extension","next_cursor":null,"observations":[{"affected":"0.1.1 < 0.66.2","affected_versions_present":true,"cve_id":"CVE-2023-36867","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36867","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-01T01:53:06.265Z","patch_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36867","primary_source":"","published":"2023-07-11T17:03:30.094Z"},{"affected":"0.1.1 < publication","affected_versions_present":true,"cve_id":"CVE-2021-28470","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-28470","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T21:47:32.646Z","patch_url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28470","primary_source":"","published":"2021-04-13T19:33:42.000Z"}],"source_generated_at":"2026-09-30T06:16:44.274Z","vendor":"Microsoft"}}