Somewhat related because also a VSCode/Jupyter and script execution issue, I found CVE-2020-16977 two years back and it was also treated as RCE.

Write up: https://embracethered.com/blog/posts/2020/cve-2020-16977-vsc...

Microsoft's bulletin: https://msrc.microsoft.com/update-guide/en-US/vulnerability/...