Skip to content
OpenAdvisories

Package · Go

github.com/coder/code-marketplace

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    CVE-2026-35454

    Code Extension Marketplace has a Zip Slip Path Traversal

    The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed…

    coder code-marketplace github.com/coder/code-marketplace Go