Eclipse Foundation vulnerabilities
301 published CVEs name Eclipse Foundation among the affected products.
- 301Published CVEs301 of them scored
- 225Last 12 monthspublished in the last year
- 34Critical133 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124683
Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in IndentationAwareTokenBuilder and…
Eclipse Foundation · Eclipse Langium
High8.7 - CVE-2026-118492
In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messages before rendering them in the default hover…
Eclipse Foundation · Eclipse Langium
Low2.0 - CVE-2026-123870
[Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when GITHUB_WEBHOOK_SECRET is unset
Eclipse Foundation · otterdog
Critical9.5 - CVE-2026-123059
Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts
Eclipse Foundation · Eclipse BaSyx Helm Charts
High7.5 - CVE-2026-123047
Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts
Eclipse Foundation · Eclipse BaSyx Helm Charts
High7.5 - CVE-2026-120421
Reflected XSS via client window id in URL client window mode
Eclipse Foundation · Eclipse Mojarra
Medium6.1 - CVE-2026-118487
Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser
Eclipse Foundation · Eclipse Vert.x
High7.5 - CVE-2026-118488
Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client
Eclipse Foundation · Eclipse Vert.x
Medium5.9 - CVE-2026-118489
CachingWebClient shares user-specific HTTP responses across users via the shared cache tier
Eclipse Foundation · Eclipse Vert.x
High7.5 - CVE-2026-89295
Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter
Eclipse Foundation · Eclipse Mnestix
High7.5