Eclipse Foundation
Open VSX 1.2.0 Blocks Marketplace Cache Poisoning
09/21/2026
Open VSX cache poisoning requires trusted attacker-controlled forwarded-host data and an unpopulated cache entry. Check the deployed server or container version and those conditions, then apply the supported update containing the 1.2.0 fix.