@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHAT-17391845...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHATUI-17391844...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: SNYK:JS-THEIAAICHATUI-17391851...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: SNYK:JS-THEIAAICHAT-17391864...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: GHSA-QWJM-9C66-W4Q4...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: GHSA-QWJM-9C66-W4Q4...

Insertion of Sensitive Information Into Sent Data

Overview @theia/ai-editor is a Theia - AI Editor Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the rendering of Markdown image tags in AI chat responses. An attacker can cause sensitive information from the workspace or conversation...

Unsafe Dependency Resolution

Overview @theia/ai-editor is a Theia - AI Editor Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the processing of workspace file and directory names in the AI chat. An attacker can cause the agent to execute attacker-controlled instructions by introducing...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: SNYK:JS-THEIAAICHATUI-17391865...

WordPress Blocksy Companion plugin <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability

Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by Pasindu Dilshan K4PXD - HACK KAP PVT LTD in WordPress Plugin Blocksy Companion versions = 2.1.45...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: MEND:CVE-2026-22551...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: MEND:CVE-2026-22551...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: MEND:CVE-2026-46580...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: MEND:CVE-2026-46580...