Skip to content
OpenAdvisories

Package · npm

@theia/task

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.4
    CVE-2026-44691

    [Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions

    In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened…

    Eclipse Foundation Eclipse Theia @theia/task @theia/debug npm