Vulnerabilidades en Eclipse Foundation
298 resultadosCVE-2026-22551MEDIUMIn Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitraryEPSS 0.3%CVE-2025-55093MEDIUMOut of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messagesEPSS 0.3%CVE-2026-4983MEDIUMOpen VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content-Type: image/svg+xmlEPSS 0.3%CVE-2026-6790MEDIUMIn Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what pEPSS 0.3%CVE-2026-102471MEDIUMCRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messagesEPSS 0.3%CVE-2026-19203HIGHA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret difEPSS 0.3%CVE-2026-102464HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClEPSS 0.3%CVE-2026-102463HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-clientEPSS 0.3%CVE-2026-92611MEDIUMIn Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard EPSS 0.3%CVE-2026-18353HIGHUnauthenticated SSRF in PIA via OIDC issuer allowlist bypassEPSS 0.3%CVE-2026-92843HIGHOut-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX SecureEPSS 0.3%CVE-2026-92853HIGHOut-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX SecureEPSS 0.3%CVE-2026-12606MEDIUMEclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveragEPSS 0.3%CVE-2026-16440MEDIUMIn Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.EPSS 0.3%CVE-2025-12383CRITICALRace Condition allows Bypass of Trust RestrictionsEPSS 0.3%CVE-2025-55098LOWPotential out-of-bounds read in _ux_host_class_audio_device_type_get()EPSS 0.3%CVE-2025-11966LOWIn Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted inEPSS 0.3%CVE-2026-113620CRITICALEclipse ioFog operator WebSocket accepts an unverified JWTEPSS 0.3%CVE-2026-103415CRITICALWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cooEPSS 0.3%CVE-2026-102466HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-clientEPSS 0.3%