{"id":"EUVD-2025-205668","enisaUuid":"f6172da6-fa7a-35ba-9a79-61bb786896ae","description":"To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.","datePublished":"Dec 29, 2025, 11:46:52 PM","dateUpdated":"Dec 30, 2025, 4:05:04 PM","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68120\nhttps://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ\nhttps://pkg.go.dev/vuln/GO-2025-4249\n","aliases":"CVE-2025-68120\nGHSA-fjmr-7667-8v4p\n","assigner":"Go","epss":0.45,"enisaIdProduct":[{"id":"1679a670-ff57-3cf6-97a8-958fba5206a8","product":{"name":"github.com/golang/vscode-go","vendor":{"name":"github.com/golang/vscode-go"}},"product_version":"0 \u003c0.52.1"}],"enisaIdVendor":[{"id":"e2f1a1ab-ab98-3227-aef9-ab1ae05be105","vendor":{"name":"github.com/golang/vscode-go"}}],"enisaIdVulnerability":[{"id":"1f4b54d1-b519-3845-a6d0-438c32713258","vulnerability":{"id":"CVE-2025-68120","description":"To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.","datePublished":"Dec 29, 2025, 11:46:52 PM","dateUpdated":"Dec 30, 2025, 4:05:04 PM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68120\nhttps://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ\nhttps://pkg.go.dev/vuln/GO-2025-4249\n","enisa_id":"EUVD-2025-205668\n","assigner":"Go","epss":0.45,"dataProcessed":"Nov 6, 2026, 7:14:06 AM","vulnerabilityProduct":[{"id":"7d25532e-b92e-3991-b5d5-f6e36982798b","product":{"name":"github.com/golang/vscode-go","vendor":{"name":"github.com/golang/vscode-go"}},"product_version":"0 \u003c0.52.1"}],"vulnerabilityVendor":[{"id":"c9cb000e-d29c-348a-b220-e3b5648ac334","vendor":{"name":"github.com/golang/vscode-go"}}]}},{"id":"f330dc68-f30d-3666-8c5e-6e1bb5d22b84","vulnerability":{"id":"GHSA-fjmr-7667-8v4p","description":"Visual Studio Code Go extension has unexpected untrusted code execution","datePublished":"Dec 30, 2025, 12:32:59 AM","dateUpdated":"Dec 31, 2025, 10:05:05 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68120\nhttps://github.com/golang/vscode-go\nhttps://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ\nhttps://pkg.go.dev/vuln/GO-2025-4249\n","enisa_id":"EUVD-2025-205668\n","aliases":"CVE-2025-68120\nGHSA-fjmr-7667-8v4p\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}