Known Vulnerabilities for Code-server by Coder
Listed below are 3 of the newest known vulnerabilities associated with "Code-server" by "Coder".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59095 json | LobeChat before 2.2.10-canary.18 contains a server-side request forgery vulnerability that allows authenticated attackers to ... | Not Provided | 2026-07-02 | 2026-07-07 |
| CVE-2026-58449 json | txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved thr... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58169 json | Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypas... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58116 json | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute... | Not Provided | 2026-06-30 | 2026-06-30 |
| CVE-2026-58057 json | Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, s... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-57527 json | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attac... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-57268 json | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be ins... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-56812 json | Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) a... | Not Provided | 2026-07-07 | 2026-07-07 |
| CVE-2026-56766 json | Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, ... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-56700 json | Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Schedule... | Not Provided | 2026-06-30 | 2026-07-01 |