VulnSea

open-vsx.org vulnerabilities

CVEs whose affected-version data names the open-vsx.org package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-90882High· 8.7
yesterday

The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints

The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue cred…

▾ TwilightEclipse Foundation · open-vsx.orgvia NVD
open-vsx.org vulnerabilities (CVEs) · VulnSea