GHSA-2GQQ-GQF2-X968 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

GHSA-8436-99HF-9MMV vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

GHSA-3XPG-4RPP-HHHM vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

GHSA-W293-VG96-WGC3 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

GHSA-2JFJ-6HJV-FM6J vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

GHSA-RX4F-C7P8-82VQ vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

CVE-2026-85014 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

CVE-2026-84890 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

CVE-2026-84947 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

CVE-2026-84961 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

CVE-2026-84933 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

CVE-2026-85008 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: pelias-api, argo-workflows, redisinsight, kubescape-grype-offline-db, prism, opensearch-dashboards, unleash, unleash-proxy, unleash-fips, wazuh-dashboard-fips, arangodb, kibana, gitlab-rails-ce, tileserver-gl, code-server, azurite, json-server, dotstatsuite-supercore...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: pelias-api, argo-workflows, redisinsight, kubescape-grype-offline-db, prism, opensearch-dashboards, unleash, unleash-proxy, unleash-fips, wazuh-dashboard-fips, arangodb, kibana, gitlab-rails-ce, tileserver-gl, code-server, azurite, json-server, dotstatsuite-supercore...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, renovate, argo-workflows, sqlpad, code-server, prism, opensearch-dashboards, langfuse, json-server...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, renovate, argo-workflows, sqlpad, code-server, prism, opensearch-dashboards, langfuse, json-server...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, renovate, argo-workflows, sqlpad, code-server, prism, opensearch-dashboards, langfuse, json-server...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, renovate, argo-workflows, sqlpad, code-server, prism, opensearch-dashboards, langfuse, json-server...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, node-gyp, saf, lerna, renovate, npm, pulumi, sqlpad, code-server, prism, opensearch-dashboards...

JLSEC-2026-1274 code-server's session cookie can be extracted by having user visit specially crafted proxy URL

Summary A maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Details Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL https:///proxy/[email protected]/path would be...