Visual Studio Code Go Extension Restricted Mode Code Execution Vulnerability
Vulnerability
A vulnerability in the Visual Studio Code Go extension, specifically in versions prior to 0.52.1, has been identified. When the extension is used in Restricted Mode, it could lead to unintended execution of untrusted code. To address this issue, the extension has been disabled in Restricted Mode.
Impact
Enabling the extension in Restricted Mode could result in the execution of untrusted code, potentially leading to security risks.
Remediation
Users can update to version 0.52.1 or later of the Visual Studio Code Go extension. The update should be automatic, but it can also be done manually through the Visual Studio Code extension marketplace.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
