Product · The Eclipse Foundation

Eclipse Theia

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.6

CVE-2020-27224

Cross-site Scripting (XSS) in Eclipse Theia

In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute arbitrary code.

The Eclipse Foundation Eclipse Theia @theia/preview npm

Feb 24, 2021