A vulnerability classified as problematic was found in Eclipse Open VSX up to 1.0.1. Affected by this issue is some unknown functionality of the file /vscode/unpkg of the component HTML File Handler. Executing a manipulation can lead to HTML injection.
This vulnerability appears as CVE-2026-13323. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-13323 | Eclipse Open VSX up to 1.0.1 HTML File /vscode/unpkg HTML injection (EUVD-2026-40945)
A vulnerability classified as problematic was found in Eclipse Open VSX up to 1.0.1. Affected by this issue is some unknown functionality of the file /vscode/unpkg of the component HTML File Handler. Executing a manipulation can lead to…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR