Eclipse Ditto (Eclipse Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-08. Vendor: Eclipse Foundation.

CVEs of Eclipse Ditto

• CVE-2026-84197 - CVSS 9.2 (critical), 2026-09-08: In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor…
• CVE-2026-84175 - CVSS 5.3 (medium), 2026-09-02: In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the…
• CVE-2026-82958 - CVSS 7.6 (high), 2026-09-02: In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting…
• CVE-2024-5165 - CVSS 6.5 (medium), 2024-05-23: In Eclipse Ditto versions 3.0.0 to 3.5.5, the user input of several input fields of the Eclipse Ditto Explorer User Interface…