Browse CVEs

HIGH 8.8 CVE-2023-46248 Cody is an artificial intelligence (AI) coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code E… Cody after 0.14.0 Fix from $1,9502023-10-31 HIGH 7.8 CVE-2022-41942 Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the gitserver service, present i… Sourcegraph 4.1.0+ Fix from $1,9502022-11-22 HIGH 7.2 CVE-2022-41943 sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental `custom… Sourcegraph 4.1.0+ Fix from $1,9502022-11-22 HIGH 7.2 CVE-2022-29171 Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserv… Sourcegraph 3.38.0+ Fix from $1,9502022-05-06 HIGH 8.8 CVE-2022-23642EPSS 74% Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` servi… Sourcegraph 3.37+ Fix from $1,9502022-02-18 MEDIUM 6.5 CVE-2022-23643 Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed side-channel vulnerabilitity i… Sourcegraph 3.35.2 / 3.36.3+ Fix from $1,6002022-02-15 MEDIUM 6.5 CVE-2021-43823 Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in priva… Sourcegraph 3.33.2+ Fix from $1,6002021-12-13 MEDIUM 6.1 CVE-2020-12283 Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/… Sourcegraph 3.15.1+ Fix from $1,6002020-04-30