HIGHnpm
GHSA-3jww-hxqj-wfq2· CVE-2026-44688[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat
Modified: 9/10/2026
package
npm/@theia/ai-code-completion
pkg:npm/%40theia/ai-code-completion
HIGHnpm
GHSA-m973-pr9r-hp2w· CVE-2026-46580[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat
Modified: 9/10/2026
MEDIUMnpm
GHSA-qwjm-9c66-w4q4· CVE-2026-22551[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat
Modified: 9/10/2026