code-server vulnerabilities

1 known vulnerability in code-server from Coder. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  code-server: Unintended Proxy or Intermediary

  CVE-2025-47269May 9, 2025CoderEPSS 56.3%

  code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a prox