agentprime: coderEvery new CVE for coder.https://agentprime.io/CVE-2026-121967: Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversalhttps://agentprime.io/advisories/CVE-2026-121967/https://agentprime.io/advisories/CVE-2026-121967/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:33:28 GMTCVECVE-2026-118687: Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authenticationhttps://agentprime.io/advisories/CVE-2026-118687/https://agentprime.io/advisories/CVE-2026-118687/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:56 GMTCVECVE-2026-111934: Coder before 2.34.7 IP Spoofing via X-Forwarded-For Headerhttps://agentprime.io/advisories/CVE-2026-111934/https://agentprime.io/advisories/CVE-2026-111934/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:44 GMTCVECVE-2026-111931: Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxyhttps://agentprime.io/advisories/CVE-2026-111931/https://agentprime.io/advisories/CVE-2026-111931/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:42 GMTCVECVE-2026-111930: Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpointhttps://agentprime.io/advisories/CVE-2026-111930/https://agentprime.io/advisories/CVE-2026-111930/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:41 GMTCVECVE-2026-111929: Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPChttps://agentprime.io/advisories/CVE-2026-111929/https://agentprime.io/advisories/CVE-2026-111929/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:40 GMTCVECVE-2026-111928: Coder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policyhttps://agentprime.io/advisories/CVE-2026-111928/https://agentprime.io/advisories/CVE-2026-111928/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:40 GMTCVECVE-2026-111927: Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Matchhttps://agentprime.io/advisories/CVE-2026-111927/https://agentprime.io/advisories/CVE-2026-111927/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:39 GMTCVECVE-2026-111926: Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifesthttps://agentprime.io/advisories/CVE-2026-111926/https://agentprime.io/advisories/CVE-2026-111926/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:38 GMTCVE