openvsx
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 19, 2025 to present
4
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
33/100
low
⚡ 1 Zero-Days
Severity Distribution
Critical
0High
0Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. OpenVSX OpenVSX4
2. Cursor Cursor2
3. Windsurf Windsurf2
4. Microsoft Visual Studio Code1
5. Microsoft Visual Code1
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/glassworm-malware-returns-on-openvsx-with-3-new-vscode-extensions/
unknown
GlassWorm malware returns on OpenVSX with 3 new VSCode extensions
11/8/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/malicious-crypto-stealing-vscode-extensions-resurface-on-openvsx/
unknown
Malicious crypto-stealing VSCode extensions resurface on OpenVSX
10/14/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/the-zero-day-that-couldve-compromised-every-cursor-and-windsurf-user/
unknown
The zero-day that could've compromised every Cursor and Windsurf user
7/11/2025⚡ Zero-Day🔧 No Patch
CVE-2025-1007
CVSS 6.9medium
Improper Authorization in /user/namespace/{namespace}/details
2/19/2025🔧 No Patch
Monitor openvsx in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.