Skip to content
OpenAdvisories

Package · Ubuntu

eclipse

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-46580

    [Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat

    In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent's system prompts. An attacker could craft a malicious repository containing prom…

    Eclipse Foundation Eclipse Theia eclipse @theia/ai-core Ubuntu npm
  • High 8.6
    CVE-2026-7412

    Eclipse BaSyx Java Server SDK vulnerable to Server-Side Request Forgery

    In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to e…

    Eclipse Foundation Eclipse BaSyx eclipse org.eclipse.basyx:basyx.sdk Ubuntu Maven
  • High 8.7
    CVE-2026-6918

    In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte …

    Eclipse Foundation Eclipse OpenJ9 eclipse Ubuntu