Improper Verification of Communication Channel in @theia/plugin-ext
In versions of the @theia/plugin-ext component of Eclipse Theia, Webview contents can be hijacked via postMessage().
Advisories for Npm/@Theia/Plugin-Ext package
2021
In versions of the @theia/plugin-ext component of Eclipse Theia, Webview contents can be hijacked via postMessage().