Browse CVEs

MEDIUM 6.8 CVE-2026-55438 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 MEDIUM 5.4 CVE-2026-55437 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, the `Ag… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 HIGH 7.4 CVE-2026-55436 Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.… Coder 2.32.7 / 2.33.8+ Fix from $1,9502026-07-08 MEDIUM 6.8 CVE-2026-55430 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the work… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 MEDIUM 6.1 CVE-2026-55431 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder o… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 MEDIUM 5.4 CVE-2026-55432 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `Cre… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 MEDIUM 5.4 CVE-2026-55433 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devc… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 HIGH 8.7 CVE-2026-55429 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertW… Coder 2.29.17 / 2.32.7+ Fix from $1,9502026-07-08 HIGH 8.3 CVE-2026-55427 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder c… Coder 2.29.17 / 2.32.7+ Fix from $1,9502026-07-08 HIGH 8.2 CVE-2026-55428 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tail… Coder 2.29.17 / 2.32.7+ Fix from $1,9502026-07-08 MEDIUM 6.5 CVE-2026-55079 Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-08 HIGH 7.4 CVE-2026-55076 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's … Coder 2.29.17 / 2.32.7+ Fix from $1,9502026-07-07 HIGH 7.2 CVE-2026-55077 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT… Coder 2.29.17 / 2.32.7+ Fix from $1,9502026-07-07 MEDIUM 6.5 CVE-2026-55078 Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.… Coder 2.29.17 / 2.32.7+ Fix from $1,6002026-07-07 HIGH 7.4 CVE-2026-55075 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaw… Coder 2.29.17 / 2.32.7+ Fix from $1,9502026-07-07 CRITICAL 9.1 CVE-2026-46354 Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2,… Coder 2.24.5 / 2.29.13+ Fix from $2,3002026-07-07 MEDIUM 6.5 CVE-2026-45796 Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, an… Coder 2.24.5 / 2.29.13+ Fix from $1,6002026-07-07 MEDIUM 6.5 CVE-2026-55434 Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.… Coder 2.33.8 / 2.34.2+ Fix from $1,6002026-07-07 HIGH 8.8 CVE-2026-44454 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the `dotfiles` registry m… Coder 2.29.7 / 2.30.2+ Fix from $1,9502026-07-07 MEDIUM 5.4 CVE-2026-55435 Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.… Coder 2.32.7 / 2.33.8+ Fix from $1,6002026-07-07 MEDIUM 6.5 CVE-2026-35454 The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketp… Code Marketplace after 2.4.1 Fix from $1,6002026-04-06 MEDIUM 5.5 CVE-2025-66411 Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests… Coder 2.26.5 / 2.27.7+ Fix from $1,6002025-12-03 MEDIUM 6.5 CVE-2025-59956 AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebindin… Agentapi 0.4.0+ Fix from $1,6002025-09-30 HIGH 8.1 CVE-2025-58437 Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder c… Coder 2.24.4 / 2.25.2+ Fix from $1,9502025-09-06 HIGH 8.2 CVE-2024-27918 Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in … Coder 2.6.1 / 2.7.3+ Fix from $1,9502024-03-21 CRITICAL 9.3 CVE-2023-26114 Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability… Code Server 4.10.1+ Fix from $2,3002023-03-23 MEDIUM 6.1 CVE-2021-42648 Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL. Code Server 3.12.0+ Fix from $1,6002022-05-11 HIGH 7.5 CVE-2021-3810 code-server is vulnerable to Inefficient Regular Expression Complexity Code Server 3.12.0+ Fix from $1,9502021-09-17