2 matches found
CVE-2026-14574
In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the PreferenceUtils.merge function in @theia/core recursively merges preference values without rejecting prototype-related keys proto, constructor, prototype. Because this function is invoked by PreferenceServiceImpl.doResolve for eve...
5.7CVSS5.5AI score0.00304EPSS
SaveExploits1References4Affected Software1
CVE-2026-14574
In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the PreferenceUtils.merge function in @theia/core recursively merges preference values without rejecting prototype-related keys proto, constructor, prototype. Because this function is invoked by PreferenceServiceImpl.doResolve for eve...
5.7CVSS0.00304EPSS
SaveExploits1References3
20