Coder
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 53 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 17, 2021 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Coder 2.38.0 before 2.38.2 Session Token Leak via Sub-Agent External Apps
Coder 2.38.0 before 2.38.4 Authorization Bypass via External Agent Credentials Endpoint
Coder from 2.38.0 before 2.38.4 Privilege Escalation via API Key Creation
Coder from 2.38.0 before 2.38.4 Memory Exhaustion DoS via Web Push
Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header
Coder before 2.34.2 User Enumeration via Login Placeholder Hash
Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy
Monitor Coder in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.