To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://pkg.go.dev/vuln/GO-2025-4249 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.4 · goNVD modified 2026-10-13 09:10
Affected (CPE criteria) 1
cpe:2.3:a:go:go:*:*:*:*:*:visual_studio_code:*:*
References 3
- https://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ Mailing List
- https://nvd.nist.gov/vuln/detail/CVE-2025-68120 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2025-4249 Vendor Advisory