Skip to content
OpenAdvisories

Product · Eclipse Foundation

open-vsx.org

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-90882

    Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data

    The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to t…

    Eclipse Foundation open-vsx.org