Advisories · Technology
coder.
Every CVE that names coder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
- coder
- Path traversal
- CVSS 8.3 High
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
- coder
- CWE-441
- CVSS 6.3 Medium
Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header
- coder
- CWE-348
- CVSS 5.3 Medium
Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy
- coder
- Open redirect
- CVSS 5.3 Medium
Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint
- coder
- Information disclosure
- CVSS 6.0 Medium
Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC
- coder
- Broken access control
- CVSS 5.3 Medium
Coder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policy
- coder
- Broken access control
- CVSS 8.7 High
Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match
- coder
- Hard-coded credentials
- CVSS 4.8 Medium
Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest
- coder
- Information disclosure