EO
Product
Eclipse Open VSX
by Eclipse Foundation · last CVE Sep 21, 2026
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch

Add Eclipse Open VSX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4983
5.4
0%
Jun 23
Open VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content-Type: image/svg+xml without security headers such as…
Affected: 0.1.0 before 0.34.1
Showing 1