Code-server vulnerabilities
We track 1 vulnerability in Code-server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 23, 2023.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Code-server vulnerabilities
- 9.3 Critical severity
code-server: Origin Validation Error
Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance.