Skip to content
OpenAdvisories

Package · Go

github.com/coder/coder

28 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-46354

    Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

    Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, `azureidentity.Validate()` verifies that the PKCS#7 signer certificate chains to a trusted Azure …

    coder coder github.com/coder/coder github.com/coder/coder/v2 Go