CVE-2026-118492 | Eclipse Langium up to 4.4.0 Diagnostic Message addHoverPopupHandler cross site scripting

A vulnerability was found in Eclipse Langium up to 4.4.0. It has been rated as problematic. This impacts the function addHoverPopupHandler of the component Diagnostic Message Handler. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-118492. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More