Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-28161
6.1
MEDIUMCVSS v3
Severity scale
010
Description
In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.
eclipse-theia/theia
GitHubEclipse Theia is a cloud & desktop IDE framework implemented in TypeScript.
GitHubEclipse Theia is a cloud & desktop IDE framework implemented in TypeScript.<= 1.8.0NVD