Eclipse Foundation Eclipse Ditto

3 known vulnerabilities in Eclipse Foundation Eclipse Ditto, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-84197 CVSS 9.2 critical In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and…
  • CVE-2026-82958 CVSS 7.6 high In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command…
  • CVE-2026-84175 CVSS 5.3 medium In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API…