1657 matches found
GO-2025-4182 Coder logs sensitive objects unsanitized in github.com/coder/coder
Coder logs sensitive objects unsanitized in github.com/coder/coder...
CVE-2025-66411
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM, K8s Pod etc. or ...
CVE-2025-66411
Summary of CVE-2025-66411 (Coder) Coder prior to versions 2.26.5, 2.27.7, and 2.28.4 logs Workspace Agent manifests containing sensitive values in plaintext. This could allow an attacker with limited local access to a Coder Workspace (VM, Kubernetes Pod, etc.) or a connected logging system (e.g.,...
EUVD-2025-201015
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM, K8s Pod etc. or ...
CVE-2025-66411: Insertion of Sensitive Information into Log File
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM, K8s Pod etc. or ...
Coder log information leakage vulnerability
Coder is an application from Coder Inc. that can set up development environments in public or private cloud infrastructures. A log information disclosure vulnerability exists in Coder versions 2.26.5, 2.27.7, and prior to 2.28.4, which stems from workspace agent manifests logging sensitive values...
Malicious code in stringify-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10becae86ef9c656952f1684dea38b47c2242b0adafc4cbf72426b3e893a3751 The package stringify-coder was found to contain malicious code...
MAL-2025-191588 Malicious code in stringify-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10becae86ef9c656952f1684dea38b47c2242b0adafc4cbf72426b3e893a3751 The package stringify-coder was found to contain malicious code...
Malicious Package
Overview stringify-coder is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
graphicsmagick:coder_GIF_fuzzer: Use-of-uninitialized-value in IsMonochromeImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6574503393296384 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderGIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
GO-2025-3991 Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi
Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi...
REx86: A Local Large Language Model for Assisting in X86 Assembly Reverse Engineering
Reverse engineering RE of x86 binaries is indispensable for malware and firmware analysis, but remains slow due to stripped metadata and adversarial obfuscation. Large Language Models LLMs offer potential for improving RE efficiency through automated comprehension and commenting, but cloud-hosted...
graphicsmagick:coder_MVG_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6397769050030080 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash...
graphicsmagick:coder_WMF_fuzzer: Heap-buffer-overflow in REGION_SubtractO
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6396337685069824 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderWMFfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...
EUVD-2020-20257
Malware in sbrugna...
EUVD-2020-18327
Malware in sbrugna...
EUVD-2019-16939
Malware in sbrugna...
EUVD-2018-11564
Malware in sbrugna...