{ "canonical_id": "spring-framework--38d4e91fa6", "system_id": "spring-framework", "title": "CVE-2026-22718: Command injection on user machine using VSCode extension for Spring CLI", "reasons": [ "missing affected/fixed version details" ], "candidate_count": 1, "references": [ "https://spring.io/security/cve-2026-22718" ] }