Security Advisories for @theia/ai-code-completion in npm
High
about 1 month ago
[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat
npm
@theia/ai-editor, @theia/ai-core, @theia/ai-code-completion, @theia/ai-claude-code, @theia/ai-chat, @theia/ai-chat-ui
Moderate
about 1 month ago
[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat
npm
@theia/ai-ide, @theia/ai-editor, @theia/ai-core, @theia/ai-code-completion, @theia/ai-claude-code, @theia/ai-chat, @theia/ai-chat-ui
High
about 1 month ago
[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat
npm
@theia/ai-ide, @theia/ai-editor, @theia/ai-core, @theia/ai-code-completion, @theia/ai-claude-code, @theia/ai-chat, @theia/ai-chat-ui
Potential
Moderate
over 4 years ago
Improper Verification of Communication Channel in @theia/plugin-ext
npm
@theia/plugin-ext
Potential
Potential
Potential
Potential
Potential
High
over 5 years ago
Insufficient Verification of Data Authenticity in Eclipse Theia
npm
@theia/mini-browser