Threats tagged 'ghsa-5f8h-2xph-wwxv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.7	EPSS 0.4%	CVE-2026-14574Eclipse Theia · Prototype Pollution Medium5.7EPSS 0.4%2026-08-05CVE Database V5CVE-2026-14574 Eclipse Theia versions 0.7.0 through 1.73.1 contain a vulnerability in the PreferenceUtils.merge function that allows prototype pollution via crafted preference values in workspace settings files. This occurs because the merge function does not reject prototype-related keys, potentially altering application logic when a workspace is opened. EPSS 0.4%Vulnerability Eclipse Foundation CWE-1321 #ghsa-5f8h-2xph-wwxv	CVE Database V5	2026-08-05

Page 1 of 1