Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: coder, coder and 2 more products 2.29.17, 2.32.7 and 2 more versions Clear all filters
TI-2026-76138 CVE-2026-111933 · GHSA-wwfw-5crg-94f6

User enumeration via login placeholder hash in Coder

Priority LOW 27

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitutes a placeholder hash derived from the string "…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00225 Published 2026-10-17 Fixed in 2.34.2, 2.33.8 +2 CWE-203
TI-2026-76137 CVE-2026-111932 · GHSA-7cmx-x3cj-5mp3

Stored HTML injection in Coder appearance settings

Priority LOW 21

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL appearance settings are rendered into HTML…

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00167 Published 2026-10-17 Fixed in 2.34.2, 2.33.8 +2 CWE-79