Skip to contentEclipse Foundation Open Vsx vulnerabilities
- eclipse foundation open vsxUrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request headers, with no che…CVE-2025-129999.1 Critical
- eclipse open vsxIn Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files...CVE-2026-133234.1 Medium
- eclipse open vsxOpen VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and...CVE-2026-49834.1 Medium
- eclipse open vsx, eclipse foundation open vsx registry, openvsx +2 moreOn open-vsx.org http://open-vsx.org/ it was possible to run an arbitrary build scripts for auto...CVE-2025-67057.6 High