Vulnerability index

Browse CVEs

28 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Coder MEDIUM 6.8
CVE-2026-55438

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder MEDIUM 5.4
CVE-2026-55437

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, the `Ag…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder HIGH 7.4
CVE-2026-55436

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.…

Fix: 2.32.7 / 2.33.8+
Fix from $1,950 2026-07-08
Coder MEDIUM 6.8
CVE-2026-55430

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the work…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder MEDIUM 6.1
CVE-2026-55431

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder o…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder MEDIUM 5.4
CVE-2026-55432

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `Cre…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder MEDIUM 5.4
CVE-2026-55433

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devc…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder HIGH 8.7
CVE-2026-55429

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertW…

Fix: 2.29.17 / 2.32.7+
Fix from $1,950 2026-07-08
Coder HIGH 8.3
CVE-2026-55427

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder c…

Fix: 2.29.17 / 2.32.7+
Fix from $1,950 2026-07-08
Coder HIGH 8.2
CVE-2026-55428

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tail…

Fix: 2.29.17 / 2.32.7+
Fix from $1,950 2026-07-08
Coder MEDIUM 6.5
CVE-2026-55079

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-08
Coder HIGH 7.4
CVE-2026-55076

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's …

Fix: 2.29.17 / 2.32.7+
Fix from $1,950 2026-07-07
Coder HIGH 7.2
CVE-2026-55077

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT…

Fix: 2.29.17 / 2.32.7+
Fix from $1,950 2026-07-07
Coder MEDIUM 6.5
CVE-2026-55078

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.…

Fix: 2.29.17 / 2.32.7+
Fix from $1,600 2026-07-07
Coder HIGH 7.4
CVE-2026-55075

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaw…

Fix: 2.29.17 / 2.32.7+
Fix from $1,950 2026-07-07
Coder CRITICAL 9.1
CVE-2026-46354

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2,…

Fix: 2.24.5 / 2.29.13+
Fix from $2,300 2026-07-07
Coder MEDIUM 6.5
CVE-2026-45796

Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, an…

Fix: 2.24.5 / 2.29.13+
Fix from $1,600 2026-07-07
Coder MEDIUM 6.5
CVE-2026-55434

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.…

Fix: 2.33.8 / 2.34.2+
Fix from $1,600 2026-07-07
Coder HIGH 8.8
CVE-2026-44454

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the `dotfiles` registry m…

Fix: 2.29.7 / 2.30.2+
Fix from $1,950 2026-07-07
Coder MEDIUM 5.4
CVE-2026-55435

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.…

Fix: 2.32.7 / 2.33.8+
Fix from $1,600 2026-07-07
Code Marketplace MEDIUM 6.5
CVE-2026-35454

The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketp…

Fix: after 2.4.1
Fix from $1,600 2026-04-06
Coder MEDIUM 5.5
CVE-2025-66411

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests…

Fix: 2.26.5 / 2.27.7+
Fix from $1,600 2025-12-03
Agentapi MEDIUM 6.5
CVE-2025-59956

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebindin…

Fix: 0.4.0+
Fix from $1,600 2025-09-30
Coder HIGH 8.1
CVE-2025-58437

Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder c…

Fix: 2.24.4 / 2.25.2+
Fix from $1,950 2025-09-06
Coder HIGH 8.2
CVE-2024-27918

Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in …

Fix: 2.6.1 / 2.7.3+
Fix from $1,950 2024-03-21
Code Server CRITICAL 9.3
CVE-2023-26114

Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability…

Fix: 4.10.1+
Fix from $2,300 2023-03-23
Code Server MEDIUM 6.1
CVE-2021-42648

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

Fix: 3.12.0+
Fix from $1,600 2022-05-11
Code Server HIGH 7.5
CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity

Fix: 3.12.0+
Fix from $1,950 2021-09-17