PT-2026-96056

Name of the Vulnerable Software and Affected Versions Open VSX affected versions not specified Description An unauthenticated remote attacker can poison the per-extension metadata cache by supplying crafted X-Forwarded-Host, X-Forwarded-Proto, and X-Forwarded-Prefix request headers. The...