Skip to content
OpenAdvisories

Product · steipete

CodexBar

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-49949

    CodexBar < 0.33.0 Credential Leakage via HTTP Redirect

    CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to the shared ProviderHTTPClient transport. Attackers can redir…

    steipete CodexBar
  • Medium 5.9
    CVE-2026-43625

    CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect

    CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting improper redirect handling for Amp and Ollama provider sessions. Attackers can position themselv…

    steipete CodexBar