CVE-2026-62848

The Metalama Roslyn-based toolkit for C# contains an unsafe deserialization vulnerability in its Windows Visual Studio integration. The issue stems from the software's failure to restrict CLR types during the deserialization of local named-pipe messages between the devenv, out-of-process Roslyn c...