Vulnerabilidades en Eclipse Foundation
298 resultadosCVE-2026-110723HIGHIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from tEPSS 0.3%CVE-2026-102479HIGHIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well kEPSS 0.3%CVE-2026-13323MEDIUMIn Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a CoEPSS 0.3%CVE-2025-55092MEDIUMPotential out of bound read in _nx_ipv4_option_process()EPSS 0.3%CVE-2025-55084MEDIUMOut of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()EPSS 0.3%CVE-2026-8384MEDIUMIn Eclipse Jetty, an HTTP URI of this form:
/public;/../admin/secret.txt
results in an unresolved path of:
/public/../admiEPSS 0.3%CVE-2025-12999CRITICALUrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-ForwardEPSS 0.3%CVE-2026-93003MEDIUMNetX Duo Web HTTP server interprets request body content as HTTP header fieldsEPSS 0.3%CVE-2026-115403HIGHNULL pointer dereference in the BSD raw IPv6 send path when the destination table is fullEPSS 0.3%CVE-2026-102718HIGHOut-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER lengthEPSS 0.3%CVE-2026-14336HIGHPIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is_issuer_kEPSS 0.3%CVE-2026-102462HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQLEPSS 0.3%CVE-2026-103224HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbounEPSS 0.3%CVE-2026-103223HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-EPSS 0.3%CVE-2026-102477HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable peEPSS 0.3%CVE-2023-6194LOWIn Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit
document type definition (DTD) rEPSS 0.3%CVE-2026-18660HIGHJetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesEPSS 0.3%CVE-2026-6272HIGHA client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStreamEPSS 0.3%CVE-2026-102715HIGHmDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packetEPSS 0.3%CVE-2026-101322HIGHIn Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastruEPSS 0.3%