Vulnerabilities - Oracle SQL Developer for VSCode - Visual Studio Code

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/09/09

Hide triaged

CVSS Score

CVE Identifier

Summary

Tags

medium

6.9

CVE-2026-10051

Eclipse Jetty is vulnerable to cross-request leakage of trailers on HTTP/1.1 keep-alive connections.

Exploits Exist

Fix Available

medium

6.3

CVE-2026-49844

Apache Log4j API is vulnerable to improper encoding of non-finite floating-point values during MapMessage JSON serialization.

Fix Available

medium

5.3

CVE-2026-64607

Apache HttpComponents Client fails to release underlying connection on invalid Content-Encoding header value, leading to potential pool exhaustion DoS.

Fix Available

medium

5.3

CVE-2026-6790

Eclipse Jetty does not strictly enforce matching request authority and Host header, potentially leading to issues with URI constructions, virtual host selection, reverse proxying, and misleading logs.

medium

5.3

CVE-2026-8384

Eclipse Jetty is vulnerable to path parameter traversal, potentially allowing non-canonical URLs to bypass authorization.

Exploits Exist

Fix Available

medium

4.7

CVE-2026-71497

jsoup is vulnerable to cross-site scripting due to incorrect handling of malformed tag names.

Fix Available

low

3.7

CVE-2025-11143

Jetty's URI parser has differential parsing of invalid or unusual URIs, potentially leading to security bypasses.

Oracle SQL Developer for VSCode

SAFE Assessment

Compliance

Security

Threats

Did you know...