Known Vulnerabilities for Code-server by Coder
Listed below are 3 of the newest known vulnerabilities associated with "Code-server" by "Coder".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45053 json | CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Arbitrary File Upload vulnerability exists in th... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-44995 json | OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuratio... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-44467 json | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. Fro... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-44428 json | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the clie... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2026-44403 json | Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mecha... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-44377 json | CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection (SSTI) vulnerabil... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-44336 json | PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai ... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-44129 json | SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA U... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2026-44002 json | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper class (intended as a safe wrapper for V... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-43943 json | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code exec... | Not Provided | 2026-05-08 | 2026-05-08 |