Open Vsx vulnerabilities

1 known vulnerability in Open Vsx from Eclipse Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Eclipse Open VSX: Improper Neutralization of Input During Web Page Generation

  CVE-2026-13323Jul 1, 2026Eclipse Foundation

  In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a Content-Security-Policy or Content-Disposition: attachment response header. An unauthenticated attacker can register a pub