Advisories · Technology

Eclipse Foundation Eclipse Open VSX.

Every CVE that names Eclipse Foundation Eclipse Open VSX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-12999 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Insufficient verification of data authenticity in Eclipse Foundation Eclipse Open VSX
- Eclipse Foundation Eclipse Open VSX
- CWE-345
Not analysed yet 21 Sept 2026
CVE-2026-13323 CVE record

CVSS 4.1 Medium

Cross-site scripting in Eclipse Foundation Eclipse Open VSX
- Eclipse Foundation Eclipse Open VSX
- Cross-site scripting (XSS)
Not analysed yet 1 Jul 2026
CVE-2026-4983 CVE record

CVSS 4.1 Medium

Cross-site scripting in Eclipse Foundation Eclipse Open VSX
- Eclipse Foundation Eclipse Open VSX
- Cross-site scripting (XSS)
Not analysed yet 23 Jun 2026