# Vulnerability in xterm.js

DevFeed: [Vulnerability in xterm.js](<https://devfeed.tech/articles/vulnerability-in-xterm-js-29980.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/xterm-js-vulnerability-affects-vs-code-users/>)

Author: info@goteleport.com (Alexey Kontsevoy, Russell Jones)

Published: 2019-01-21T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Emulator](<https://devfeed.tech/topics/emulator.md>), [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>), [Terminal](<https://devfeed.tech/topics/terminal.md>), [Vim](<https://devfeed.tech/topics/vim.md>)

Tags: [bugs](<https://devfeed.tech/tags/bugs.md>), [emulator](<https://devfeed.tech/tags/emulator.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [visual-studio-code](<https://devfeed.tech/tags/visual-studio-code.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

The article examines a remote code execution vulnerability in xterm.js, a web-based terminal emulator, and traces it to an older bug in term.js. It explains that affected older versions of Visual Studio Code could leave developer machines vulnerable and describes how unsanitized device control string responses enabled crafted input to be written to terminal output.

## Source excerpt

The recently discovered xterm.js vulnerability shows how bugs are hard to kill as technology evolves.