VDB
GCVE-110-CLOUD-2024-0032
GCVE-110-CLOUD-2024-0032
Advisory Published
GitHub Copilot Chat VS Code Extension was vulnerable to data exfiltration via prompt injection when analyzing untrusted source code. The vulnerability allowed attackers to access previous conversation turns and append information from the chat history to an image URL, which was then automatically retrieved by Copilot, sending the data to the attacker.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| GitHub | GitHub Copilot Chat | — | — |
| GitHub | Cloud Services | — | — |
Browse GCVE Records
73,161 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.