VS Code 1.141.1 Released with Security Fixes
1 min read
•
Impact: 5/10
•
Zero Trackers
Key Takeaway
VS Code version 1.141.1 has been released with security fixes, including sandbox permission approval isolation.
Summary
Microsoft has released VS Code version 1.141.1, which includes security fixes for the code editor. The update addresses sandbox permission approval isolation and restricts root sandbox configuration to shared deny rules. The changes were validated through targeted tests and code checks.
Security Fixes in VS Code 1.141.1
- Restrict root sandbox configuration to shared deny rules
- Support per-server sandbox access grants while preserving root and server deny rules
- Persist sandbox permission approvals only for the requesting server
Why it matters
This update improves the security of VS Code, which is widely used in the open source community, by addressing potential vulnerabilities in sandbox permission approval.