Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-28162
6.1
MEDIUMCVSS v3
Severity scale
010
Description
In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.
eclipse-theia/theia
GitHubEclipse Theia is a cloud & desktop IDE framework implemented in TypeScript.
GitHubEclipse Theia is a cloud & desktop IDE framework implemented in TypeScript.<= 0.16.0NVD