npm/@theia/ai-chat CVE-2026-22551: medium 6.5, EPSS 0.31%

[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat

Action: Upgrade @theia/ai-chat to 1.71.0 or later.

npm i @theia/ai-chat@1.71.0

Affected

Fixed versions

Sources

• osv: GHSA-qwjm-9c66-w4q4#npm/@theia/ai-chat
• nvd: CVE-2026-22551
• https://github.com/eclipse-theia/theia/issues/16892
• https://github.com/eclipse-theia/theia/pull/17364
• https://github.com/eclipse-theia/theia/commit/e3fdfe6992389bc5fa611058d00c39d7408508ed
• https://github.com/eclipse-theia/theia
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/115

CVE-2026-22551 · published 2026-06-18T18:35:22Z · modified 2026-09-10T03:50:50.303567764Z · JSON