Threats tagged 'ghsa-x649-8g7w-vfq7'

A vulnerability in Salesforce Agentforce Vibes Extension prior to version 3.2.0 allows improper neutralization of input used for large language model (LLM) prompting, leading to potential code injection. The flaw is identified as CWE-94 and has a CVSS 3.1 base score of 6.5, indicating a medium severity. There is no indication of known exploits in the wild or available patches at this time.