But don't worry, say Python maintainers, attackers can only stall your machine even though technically it is remotely exploitable.

Java for Visual Studio Code now gets SonarLint 'spellchecker' tool, while the Python extension gets a new debugger.