Coder · product
coder
41 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 41 is a mark on the map. Named now: 27 to 41, most at risk first.
- Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
- Coder logged sensitive objects unsanitized
- Coder before 2.34.2 User Enumeration via Login Placeholder Hash
- Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing
- Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access
- Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match
- Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC
- Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint
- Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
- Coder before 2.23.0 Session Expiration Bypass via OIDC Without Refresh Token
- Coder before 2.34.2 Stored HTML Injection via Appearance Settings
- Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy
- Coder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policy
- Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header
- Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.