https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T07:50:00.932332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-34436 CVE-2021-34436 2026-10-17T07:50:00.953120+00:00

Affected: The Eclipse Foundation Eclipse Theia

In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extension. This extension uses lsp4xml (recently renamed to LemMinX) in order to provide language support for XML. This is installed by default.