Visual Studio Code vulnerability