Tag: advisory

One-Click Token Theft: Vulnerability in VS Code Web Edition Exposes GitHub Repositories

By Saran K published June 3, 2026

A critical security flaw in the browser-based version of VS Code allows attackers to exfiltrate GitHub OAuth tokens through a webview keyboard event leak.