eclipse-theia/theia Security Advisories | GitStock

high2026-06-18

[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat

GHSA-m973-pr9r-hp2w · CVE-2026-46580

high2026-06-18

[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions

GHSA-g9jw-92q7-g7fj · CVE-2026-44691

medium2026-06-18

[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat

GHSA-qwjm-9c66-w4q4 · CVE-2026-22551

high2026-06-18

[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat

GHSA-3jww-hxqj-wfq2 · CVE-2026-44688

medium2021-11-15

Improper Verification of Communication Channel in @theia/plugin-ext

GHSA-w6v7-w58j-pg5r · CVE-2021-41038