A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0657.json"