Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the agentConn.apiClient process. An attacker can gain unauthorized access to sensitive files or execute arbitrary commands as another workspace user by redirecting API requests to a victim's agent,...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the coder open app process. An attacker can obtain a user's session token and impersonate their account by crafting a malicious external app URL containing a session token placeholder, which is then replaced with the...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the coder open app process. An attacker can obtain a user's session token and impersonate their account by crafting a malicious external app URL containing a session token placeholder, which is then replaced with the...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' in the httpapi.RequestHost process. An attacker can gain unauthorized access to sensitive data by sending requests with a crafted X-Forwarded-Host header, which is trusted over the real...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the coder config-ssh process. An attacker can execute arbitrary commands on the local system by injecting malicious SSH configuration directives through unsanitized server-supplied values. This is only exploitable ...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the coder config-ssh process. An attacker can execute arbitrary commands on the local system by injecting malicious SSH configuration directives through unsanitized server-supplied values. This is only exploitable ...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the coder config-ssh process. An attacker can execute arbitrary commands on the local system by injecting malicious SSH configuration directives through unsanitized server-supplied values. This is only exploitable ...

Incorrect Type Conversion or Cast

Overview Affected versions of this package are vulnerable to Incorrect Type Conversion or Cast via the OIDC callback process. An attacker can gain unauthorized access to user accounts by exploiting improper type handling of the emailverified claim, allowing account takeover without prior...

CLSA-2026-1783351635 Fix of 11 CVEs

SECURITY UPDATE: uninitialized pointer dereference in the JBIG decoder - debian/patches/CVE-2026-28691.patch: bail out when the JBIG decode loop ends with a status other than JBGEOK in coders/jbig.c - CVE-2026-28691 SECURITY UPDATE: integer overflow in the DIB coder leading to out-of-bounds...

CLSA-2026-1783345013 ImageMagick: Fix of 8 CVEs

CVE-2026-46522: add the missing length==0 checks to the MIFF decoder BZ2/LZMA/zlib decompression paths to reject empty compressed chunks and prevent an infinite loop CPU exhaustion on crafted files - CVE-2026-46523: mark the MSL coder as not supporting direct blob I/O...

CLSA-2026-1783340363 Fix of 7 CVEs

SECURITY UPDATE: Heap use-after-free in the MSL coder via a crafted MSL image - debian/patches/CVE-2026-46523.patch: disable blobsupport for the MSL pseudo-coder in RegisterMSLImage in coders/msl.c - CVE-2026-46523...

CLSA-2026-1782808222 Fix CVE(s): CVE-2026-46559, CVE-2026-49218, CVE-2026-53460

SECURITY UPDATE: fix missing dimension check in DCM decoder invalid image dimensions - debian/patches/CVE-2026-49218.patch: fix missing dimension check in DCM decoder invalid image dimensions - CVE-2026-49218 SECURITY UPDATE: fix missing maximum memory request check in AcquireAlignedMemory...

ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder

A flaw was found in ImageMagick. A remote attacker could exploit a missing check in the Multiple-image Network Graphics MNG coder to read more images than allowed by policy. This could lead to excessive resource consumption, resulting in a denial of service DoS...

Linux Distros Unpatched Vulnerability : CVE-2026-56376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale...

RHEL 7 : ImageMagick (RHSA-2026:32961)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:32961 advisory. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. Security Fixe...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: terraform, telegraf, external-secrets-operator-fips, kube-conformance, prometheus, chisel, rancher-agent, docker-machine-driver-harvester, knative-serving-fips, mattermost, flux-source-controller, nemo, drone-fips, argocd-image-updater-fips, calico-fips, minio-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: terraform, telegraf, buildkitd, crossplane-provider-aws-guardduty-fips, splunk-otel-collector, prometheus, grype-db, rancher-agent, sealed-secrets-fips, terraform-provider-acme, crossplane-fips, flux-source-controller, cluster-api-azure-controller-fips,...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:2580-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2580-1 advisory. This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues ...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the PKCS7 signature verification process for Azure instance identity. An attacker can obtain agent tokens without authentication by bypassing signature validation. Remediation Upgrade...

GO-2026-5196 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder

Coder: PKCS7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder...