At its core, VS Code is built on an open source project called Code OSS, published under the permissive MIT license.

Three vulnerabilities discovered in the open-source PHP package Voyager for managing Laravel applications could be used for remote code execution attacks. The issues remain unfixed and can be ...