All 12 CVE vulnerabilities found in Eclipse Theia, with AI-generated Chinese analysis, references, and POCs.
This page documents the Common Weakness Enumeration (CWE) vulnerabilities associated with the Eclipse Theia open-source cloud development platform. It aggregates security data related to the specific weaknesses identified within this vendor’s software ecosystem, providing a centralized view of its historical security posture. The content here collects reported vulnerabilities affecting Eclipse Theia, covering incidents and advisories from its initial releases up to the present day. By accessing this resource, users can track a vendor's advisories as they are published and released, offering insight into how the project responds to security threats. Readers can also gain a deeper understanding of a weakness class by seeing how specific CWEs manifest within the context of this particular IDE framework. Furthermore, this page allows users to look up a product's vulnerability history, enabling developers and security analysts to assess the evolution of security issues over time. This historical perspective is crucial for evaluating the long-term stability and maintenance practices of the Eclipse Theia project. The aggregated data serves as a reference for compliance, risk assessment, and secure coding practices within the Eclipse ecosystem. It highlights patterns in vulnerability discovery and resolution, helping stakeholders make informed decisions about upgrading and patching their environments. This information supports transparency and accountability in open-source software development.
Vendor: The Eclipse Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-10055 | Eclipse Theia 信息泄露漏洞 CWE-918 | 8.5 | High | 2026-07-03 |
| CVE-2026-10054 | Eclipse Theia 输入验证错误漏洞 CWE-1385 | 8.8 | High | 2026-07-03 |
| CVE-2026-44691 | Eclipse theia 软件供应链问题漏洞 CWE-829 | - | - | 2026-06-18 |
| CVE-2026-22551 | Eclipse theia 信息泄露漏洞 CWE-201 | - | - | 2026-06-18 |
| CVE-2026-46580 | Eclipse theia 软件供应链问题漏洞 CWE-829 | - | - | 2026-06-18 |
| CVE-2026-44688 | Eclipse theia 软件供应链问题漏洞 CWE-1427 | - | - | 2026-06-18 |
| CVE-2021-34436 | Eclipse Theia 代码问题漏洞 CWE-611 | 9.8 | - | 2021-09-02 |
| CVE-2021-34435 | Eclipse Theia 访问控制错误漏洞 CWE-942 | 8.8 | - | 2021-09-01 |
| CVE-2021-28162 | Eclipse Theia 注入漏洞 CWE-830 | 6.1 | - | 2021-03-12 |
| CVE-2021-28161 | Eclipse Theia 跨站脚本漏洞 CWE-79 | 6.1 | - | 2021-03-12 |
| CVE-2020-27224 | Eclipse Theia 跨站脚本漏洞 CWE-79 | 8.8 | - | 2021-02-24 |
| CVE-2019-17636 | Eclipse Theia 数据伪造问题漏洞 CWE-345 | 9.1 | - | 2020-03-10 |
All 12 known CVE vulnerabilities affecting Eclipse Theia with full Chinese analysis, references, and POCs where available.