Vulnérabilités de Eclipse Foundation Eclipse Open VSX
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2025-12999 | UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the… | 9.1 Critique | 21 sept. 2026 |
| CVE-2026-13323 | In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type:… | 4.1 Moyenne | 1 juil. 2026 |
| CVE-2026-4983 | Open VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with… | 4.1 Moyenne | 23 juin 2026 |