{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft Visual Studio Code: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--visual-studio-code/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--visual-studio-code/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69370/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69370/",
   "title": "CVE-2026-69370 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T18:59:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70098/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70098/",
   "title": "CVE-2026-70098 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T18:59:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102238/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102238/",
   "title": "CVE-2026-102238 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T18:59:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102235/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102235/",
   "title": "CVE-2026-102235 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T18:59:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102234/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102234/",
   "title": "CVE-2026-102234 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.",
   "date_published": "2026-10-13T18:59:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102233/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102233/",
   "title": "CVE-2026-102233 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.",
   "date_published": "2026-10-13T18:59:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102232/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102232/",
   "title": "CVE-2026-102232 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.",
   "date_published": "2026-10-13T18:59:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102231/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102231/",
   "title": "CVE-2026-102231 · Microsoft Visual Studio Code · disclosed",
   "content_text": "Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.",
   "date_published": "2026-10-13T18:59:27Z"
  }
 ]
}
