CVE-2026-12856 - Vscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extension
CVE ID :CVE-2026-12856 Published : June 29, 2026, 12:33 p.m. | 2 hours, 38 minutes ago Description :A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a...