Skip to content
OpenAdvisories

Package · npm

@theia/ai-code-completion

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.7
    CVE-2026-22551

    [Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat

    In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Combined with prompt injection in a malicious workspace, an attacker could induce t…

    Eclipse Foundation Eclipse Theia eclipse @theia/ai-core Ubuntu npm