{"id":"GO-2025-4249","revision":"f48f2e29b6bb4c12bcb875c13464f868","records":[{"revision":"f48f2e29b6bb4c12bcb875c13464f868","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4249","aliases":["CVE-2025-68120","GHSA-fjmr-7667-8v4p"],"title":"Unexpected untrusted code execution in github.com/golang/vscode-go","description":"To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.","state":0,"publishedAt":"2025-12-29T21:38:26+00:00","modifiedAt":"2025-12-31T22:26:00.288218+00:00","affected":[{"ecosystem":"Go","name":"github.com/golang/vscode-go","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.52.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-68120","https://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4249","license":"OSV · upstream source license applies","key":"osv:GO-2025-4249","identifiers":["GO-2025-4249","CVE-2025-68120","GHSA-fjmr-7667-8v4p"]},"retained":false,"historicalAffected":[]}],"coverage":[]}