{"action":"Upgrade @theia/ai-code-completion to 1.71.0 or later.","affected":[{"fixed":"1.71.0","introduced":"0"}],"component":"@theia/ai-code-completion","cve_ids":["CVE-2026-22551"],"ecosystem":"npm","epss":0.00312,"exploited":false,"fixed_versions":["1.71.0"],"ghsa_id":"GHSA-qwjm-9c66-w4q4","id":"tcs_01M5KG7BCYRDHMKC9NP2SWNABJ","modified_at":"2026-09-10T03:50:50.303567764Z","published_at":"2026-06-18T18:35:22Z","references":["https://osv.dev/vulnerability/GHSA-qwjm-9c66-w4q4","https://nvd.nist.gov/vuln/detail/CVE-2026-22551","https://github.com/eclipse-theia/theia/issues/16892","https://github.com/eclipse-theia/theia/pull/17364","https://github.com/eclipse-theia/theia/commit/e3fdfe6992389bc5fa611058d00c39d7408508ed","https://github.com/eclipse-theia/theia","https://gitlab.eclipse.org/security/cve-assignment/-/work_items/115"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qwjm-9c66-w4q4#npm/@theia/ai-code-completion","url":"https://osv.dev/vulnerability/GHSA-qwjm-9c66-w4q4"}],"summary":"[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat"}