eclipse_basyx_aas_web_ui vulnerabilities

CVEs whose affected-version data names the eclipse_basyx_aas_web_ui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101322High· 8.3

today

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorization` header to outgoing requests without checking the destination origin

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorization` header to outgoing requests without checking the destination origin. In d…

▾ TwilightEclipse Foundation · Eclipse BaSyx AAS Web UIvia NVD