Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-68120 EUVD-2025-205668GHSA-fjmr-7667-8v4pGO-2025-4249

Unexpected untrusted code execution in github.com/golang/vscode-go

Published Dec 29, 2025 · Updated Dec 30, 2025 · Assigned by Go

Description

To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.

Affected products

VendorProductAffectedFixed
github.com/golang/vscode-go github.com/golang/vscode-go < 0.52.1 0.52.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20251230T014957-150000.1.134.1 SUSE-SU-2026:0037-1

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/golang/vscode-go < 0.52.1 0.52.1 GHSA-fjmr-7667-8v4p

Advisories 2

References