Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-41038

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-w6v7-w58j-pg5r

Improper Verification of Communication Channel in @theia/plugin-ext In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().

gitlab/npm/@theia/mini-browser/CVE-2021-41038

Insufficient Verification of Data Authenticity The @theia/plugin-ext component of Eclipse Theia, Webview contents can be hijacked via `postMessage()`.

gitlab/npm/@theia/plugin-ext/CVE-2021-41038

Improper Verification of Communication Channel in @theia/plugin-ext In versions of the @theia/plugin-ext component of Eclipse Theia, Webview contents can be hijacked via postMessage().

gitlab/npm/@theia/preview/CVE-2021-41038

Insufficient Verification of Data Authenticity The @theia/plugin-ext component of Eclipse Theia, Webview contents can be hijacked via `postMessage()`.