Vulnerabilities in coder

6 results

CVE-2025-47269HIGHcode-server session cookie can be extracted by having user visit specially crafted proxy URLEPSS 34.3%CVE-2024-27918HIGHCoder's OIDC authentication allows email with partially matching domain to registerEPSS 1.0%CVE-2025-59956MEDIUMAgentAPI exposed user chat history via a DNS rebinding attackEPSS 0.4%CVE-2025-58437HIGHCoder's privilege escalation vulnerability could lead to a cross workspace compromiseEPSS 0.3%CVE-2026-35454HIGHCode Extension Marketplace has a Zip Slip Path TraversalEPSS 0.3%CVE-2025-66411HIGHCoder logged sensitive objects unsanitizedEPSS 0.2%