One of the most popular developer tools has a critical vulnerability