Coder

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 29
    Known Exploited: 0
    1
    Critical Level Threats
    15
    High Level Threats
    13
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-55438

    Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

    Last Modified: Jul 08, 2026
    Published: Jul 08, 2026

    CVE-2026-55437

    Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

    Last Modified: Jul 10, 2026
    Published: Jul 08, 2026

    CVE-2026-55436

    Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

    Last Modified: Jul 08, 2026
    Published: Jul 08, 2026

    CVE-2026-55433

    Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

    Last Modified: Jul 08, 2026
    Published: Jul 08, 2026

    CVE-2026-55432

    Coder's sub-agent app registration bypasses template port-sharing policy enforcement

    Last Modified: Jul 08, 2026
    Published: Jul 08, 2026
    Items Per Page