@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-42648 via code-server (>=3.9.2, <=3.9.3)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-42648 Source advisory: OSV:GHSA-2GP3-6C9P-JP7W...

Cross site scripting in code-server

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

GHSA-2GP3-6C9P-JP7W Cross site scripting in code-server

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-42648 via code-server (>=3.9.2, <=3.9.3)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-42648 Source advisory: GHSA-2GP3-6C9P-JP7W...

CVE-2021-42648

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

CVE-2021-42648

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

CVE-2021-42648

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

CVE-2021-42648

Coder Code-Server is affected by a Cross-Site Scripting (XSS) vulnerability in versions before 3.12.0, exploitable via crafted URLs. Affected component: code-server frontend handling error messages; root cause: insufficient escaping of user-supplied input in error handling. Impact: arbitrary code...

CVE-2021-42648

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

CVE-2021-42648

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-42648 via code-server (>=3.9.2, <=3.9.3)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-42648 Source advisory: MEND:CVE-2021-42648...

CVE-2021-42648: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...

PT-2022-11652

Name of the Vulnerable Software and Affected Versions Coder Code-Server versions prior to 3.12.0 Description A cross-site scripting XSS issue exists, allowing attackers to execute arbitrary code via a crafted URL. This enables the execution of malicious scripts, potentially leading to unauthorize...

Coder Code-Server Cross-Site Scripting Vulnerabilities

Coder Code-Server is a U.S. Coder company based on Microsoft's open source Visual Studio Code development products. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in Coder Code-Server versions prior to 3.12.0, which can be...

@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-3810 via code-server (>=3.9.2, <=3.9.3)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-3810 Source advisory: OSV:GHSA-49X3-8228-3W3M...

Inefficient Regular Expression Complexity in code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

GHSA-49X3-8228-3W3M Inefficient Regular Expression Complexity in code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-3810 via code-server (>=3.9.2, <=3.9.3)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-3810 Source advisory: GHSA-49X3-8228-3W3M...

Regular Expression Denial Of Service (ReDoS)

code-server is vulnerable to regular expression denial of service. An attacker is able to send a malicious string which require extensive processing of regex machine, leading to an application crash...

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...