coder/code-server Security Advisories | GitStock

high2025-05-09

code-server's session cookie can be extracted by having user visit specially crafted proxy URL

GHSA-p483-wpfp-42cj · CVE-2025-47269

critical2023-03-23

code-server vulnerable to Missing Origin Validation in WebSockets

GHSA-frjg-g767-7363 · CVE-2023-26114

medium2022-05-12

Cross site scripting in code-server

GHSA-2gp3-6c9p-jp7w · CVE-2021-42648