An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65716.json"
[ { "events": [ { "introduced": "0.8.18" } ] } ]