visual_studio_code_copilot_chat_extension vulnerabilities
CVEs whose affected-version data names the visual_studio_code_copilot_chat_extension package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-45482High· 8.4Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
▾ TwilightMicrosoft · Microsoft Visual Studio Code CoPilot Chat ExtensionEPSS 0.34%via CVEORG
CVE-2026-23653Medium· 5.7GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Microsoft Visual Studio Code CoPilot Chat ExtensionEPSS 0.74%via CVEORG