4 matches found
SUSE CVE-2026-55433
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devcontainer recreate endpoint relied on route middleware that checked only ActionRead on the workspace and, unlike the sibling delete endpoint, perform...
CVE-2026-55433 Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devcontainer recreate endpoint relied on route middleware that checked only ActionRead on the workspace and, unlike the sibling delete endpoint, perform...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the devcontainer recreate endpoint. An attacker can destroy uncommitted in-container state or repeatedly trigger container recreation to cause denial of service by exploiting insufficient authorization checks...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the devcontainer recreate endpoint. An attacker can destroy uncommitted in-container state or repeatedly trigger container recreation to cause denial of service by exploiting insufficient authorization checks...