All products

code-server

npm · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
code-server's session cookie can be extracted by having user visit specially crafted proxy URLCVE-2025-47269 · GHSA-P483-WPFP-42CJ code-server npm High Fix reported
code-server vulnerable to Missing Origin Validation in WebSocketsCVE-2023-26114 · GHSA-FRJG-G767-7363 code-server npm Critical Fix reported
Inefficient Regular Expression Complexity in code-serverCVE-2021-3810 · GHSA-49X3-8228-3W3M code-server npm High Fix reported
Cross site scripting in code-serverCVE-2021-42648 · GHSA-2GP3-6C9P-JP7W code-server npm Medium Fix reported