CVE-2026-119976

The Visual Studio Code - GitHub Pull Requests and Issues Extension is vulnerable to an information disclosure vulnerability (CWE-73) caused by external control of file name or path . An unauthorized attacker could exploit this to disclose sensitive information over a network, potentially leading ...