EC
Product
Eclipse Che
by Eclipse Foundation · last CVE Oct 28, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch

Add Eclipse Che to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86671
8.4
0%
Oct 5
In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to `URLFetcher.fetch()`, which…
Affected: 7.29.0 before 7.123.0
Showing 1