The January 2026 update has arrived.
VS Code's official Snap package on Linux has a bug first reported in 2024 that still hasn't been fixed and is gobbling up ...
Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.