Even so, the Experimental - Python for the Web (Preview) extension in the VS Code Marketplace has been installed 283 times as of this writing (see screenshot above). The item description lists the ...

The remote code execution bug, tracked as CVE-2020-1192, is exposed when Microsoft's VS Code Python extension loads workspace settings from a file from a notebook, such as Jupyter.

Programming language Python VS Code extension: New update has critical security fix; Microsoft: Bosque is a new programming language built for AI in the cloud ...