cbcvebase.

Eclipse Foundation Eclipse Theia Website vulnerabilities

1 known vulnerability affecting eclipse_foundation/eclipse_theia_website.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-1699P2HIGHCVSS 8.8fixed in 2fb0cc4bfc372cfaef79feb4eebb6563778b25602026-01-30
CVE-2026-1699 [HIGH] CWE-829 CVE-2026-1699: In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml u In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to repository secrets and a GITHUB_TOKEN with extensive wri
nvd
Eclipse Foundation Eclipse Theia Website vulnerabilities | cvebase