7 matches found
@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-46580 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)
@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...
@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-46580 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)
@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...
@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-22551 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)
@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...
Unsafe Dependency Resolution
Overview @theia/ai-core is a Theia - AI Core Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the processing of workspace file and directory names in the AI chat. An attacker can cause the agent to execute attacker-controlled instructions by introducing special...
@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-44688 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)
@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...
@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-22551 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)
@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...
@fangoling/ai-terminal-assistant (0.1.0), @theia/ai-anthropic (>=1.57.0-next.37, <=1.70.2) +28 more potentially affected by CVE-2026-44688 via @theia/ai-core (>=1.46.0-next.241, <=1.70.2)
@theia/ai-core NPM version =1.46.0-next.241, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.46.0-next.241, =1.67.0-next.56, =1.68.0-next.79, =1.64.0, =0.0.1, =1.60.0, =1.46.0-next.241, =1.46.0-next.241, =1.59.0-next.62, =1.70.2 - @theia/ai-ide-agents 1.57.0-next.136 and more...