Vulnerabilities of Eclipse Foundation Eclipse Open VSX
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-12999 | UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the… | 9.1 Critical | Sep 21, 2026 |