codercom/code-server

codercom/code-server

Docker HubDocker Hub
Docker Hubhub.docker.com
Releases1.08K
Frequency2 days 11 hours
Last Release
Downloads144M
Stars591
VS Code in the browser
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-26114NVD↗
< 4.10.18.2 HIGH—

Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance.

CVE-2021-42648NVD↗
< 3.12.06.1 MEDIUM4.3 MEDIUM

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

CVE-2021-3810NVD↗
< 3.12.07.5 HIGH7.8 HIGH

code-server is vulnerable to Inefficient Regular Expression Complexity