pkg:Go/github.com/coder/coder

All known vulnerabilities

• CRITICAL9.1CVE-2026-46354Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft
  from 0, <= 0.27.3
• HIGH8.2CVE-2024-27918Incorrect email domain verification in github.com/coder/coder
  from 0, <= 0.27.3
• HIGH8.2CVE-2024-27918Incorrect email domain verification in github.com/coder/coder
  from 0
• HIGH8.1Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder
  from 0
• HIGH7.8Coder logs sensitive objects unsanitized in github.com/coder/coder
  from 0
• MEDIUM6.5Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint
  from 0, <= 0.27.3