Eclipse Foundation Eclipse Ditto Schwachstellen (CVE)

Für Eclipse Foundation Eclipse Ditto veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
9.2Kritisch
CVE-2026-84197
Eclipse Foundation Eclipse Ditto

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node_1.0 from 1.0.0 to 2.1.0, the WebSocket transport …

7.6Hoch
CVE-2026-82958
Eclipse Foundation Eclipse Ditto

In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g. {{ header:device_id }}) resolved from inbound message headers into a pre-configu…

5.3Mittel
CVE-2026-84175
Eclipse Foundation Eclipse Ditto

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects withou…