Known vulnerabilities in Eclipse Foundation Eclipse OpenVSX
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-89321 | Publishing limits the compressed size of a VSIX (ovsx.publishing.max-content-size, 512 MB by default) but nothing… | 4.3 Medium | Sep 14, 2026 |