Eclipse Foundation — Vulnerabilities & Security Advisories 280

Browse all 280 CVE security advisories affecting Eclipse Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

The Eclipse Foundation operates as a non-profit organization managing an open-source ecosystem, primarily hosting the Eclipse Integrated Development Environment (IDE) and related tooling. Its infrastructure supports a vast array of plugins and projects, creating a complex attack surface that has historically resulted in numerous security vulnerabilities. Recorded Common Vulnerabilities and Exposures (CVEs) frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or insecure default configurations within specific plugins rather than the core platform itself. While the Foundation maintains rigorous governance and security advisory processes, the decentralized nature of its project portfolio means individual components may lag in patching. Notable incidents have highlighted risks associated with supply chain dependencies and outdated libraries within the broader ecosystem. Consequently, users must prioritize regular updates and strict plugin vetting to mitigate exposure to these historically common vulnerability classes.

Found 4 results / 280 Clear Filters

Top products by Eclipse Foundation: NetX Duo Eclipse Vert.x ThreadX Eclipse Jetty Eclipse Theia Eclipse Glassfish Eclipse KeyPont - GOSE Eclipse ThreadX Eclipse ThreadX - NetX Duo Eclipse ThreadX - GUIX Eclipse OpenJ9 Jetty Eclipse Milo Eclipse CSI - PIA Eclipse ioFog Eclipse Ditto OpenJ9 Eclipse OMR Mosquitto USBX Eclipse Ankaios Eclipse aeriOS Eclipse Connected Services Platform Eclipse Open VSX Eclipse ThreadX - USBX Eclipse Che eclipse-threadx/netxduo Eclipse OpenMQ Open J9 Eclipse BaSyx

CVE ID	Title	CVSS	Severity	Published
CVE-2026-16441	Eclipse OpenJ9 : Method resolution default method precedence failure — OpenJ9 CWE-758	-	-	2026-07-21
CVE-2026-16439	Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow — OpenJ9 CWE-124	-	-	2026-07-21
CVE-2025-4447	Buffer Overflow in Eclipse OpenJ9 — OpenJ9 CWE-121	9.8^AI	Critical ^AI	2025-05-09
CVE-2023-5676	Eclipse OpenJ9 possible infinite busy hang — OpenJ9 CWE-364	4.1	Medium	2023-11-15

This page lists every published CVE security advisory associated with Eclipse Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.