Eclipse Foundation Open-vsx.org vulnerabilities

• eclipse foundation open-vsx.org Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data CVE-2026-90882 8.7 HighSeptember 22, 2026