eclipse-theia/theia
master@ 52f32dbFixes5
CVEs0
Peak severityCritical
Commits8,698
Regression coverage50.0%
Highlights
Cross-Site Scripting: 2 prior fixes. Scrutinize any change in this area.
packages/core/src/electron-node/token/electron-token-validator.ts: most-fixed (1 issue). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Arbitrary File Access: 1 historical fix(es) link packages/filesystem/src/node/upload/node-file-upload-service.ts to Arbitrary File Access.
Cross-Site Scripting: 1 historical fix(es) link packages/messages/src/browser/notification-component.tsx to Cross-Site Scripting.
Cross-Site Scripting: 1 historical fix(es) link packages/preview/src/browser/markdown/markdown-preview-handler.ts to Cross-Site Scripting.
Last analyzed 30 Sep 2026, 02:51 UTC