medium severity2 problems
The vulnerability in VSCode allows for the theft of GitHub tokens through malicious extensions, posing a significant ...
No opportunity validation — singleton clusters are skipped.
Underlying problems (2)
The vulnerability in VSCode allows for the theft of GitHub tokens through malicious extensions, posing a significant security risk for developers.
There is a security vulnerability in VSCode that allows for GitHub token stealing.