Eclipse Foundation Eclipse Open VSX

1 known vulnerability in Eclipse Foundation Eclipse Open VSX, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2025-12999 CVSS 9.1 critical UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host…