CRITICAL Vulnerability found in non-os package type (npm) - /opt/code-server/lib/vscode/extensions/handlebars/package.json

[graczhual]

https://www.npmjs.com/package/handlebars
Is this the built-in extension in vscode? How can we upgrade it? THX

[code-asher]

This is a false positive, so it can be ignored. The vulnerability is in the handlebars package, not in the built-in extension. They just happened to be named the same.

Related: #6332