microsoft/vscode

microsoft/vscode

GitHubGitHub
GitHubgithub.com
code.visualstudio.comcode.visualstudio.com
Releases373
Frequency1 week 3 days
Last Release
Stars187K
Visual Studio Code
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-66389↗
7.5 HIGH—

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.