Skip to content
OpenAdvisories

Product · Eclipse Foundation

OpenVSX

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-1007

    Improper Authorization in /user/namespace/{namespace}/details

    In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/{namespace}/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social m…

    Eclipse Foundation OpenVSX