CVE-2026-89321

A flaw was found in OpenVSX. A publisher can upload a small, highly compressible VSIX Visual Studio Code Extension file. When this file is processed, the server's WebResourceService decompresses it without limiting the size of the extracted content, leading to uncontrolled growth of temporary fil...