`github.com/coder/coder/v2`

Ecosystem:
go

Package URL:
pkg:golang/github.com/coder/coder/v2

Total PRs:
14 Dependabot PRs

Latest PR:
about 2 months ago

Unique Repositories:
3 repositories

Unique Repos (30 days):
0 repositories

Security Advisories

Coder's OIDC authentication allows email with partially matching domain to register

GHSA-7cc2-r658-7xpf CVE-2024-27918 HIGH published over 1 year ago • updated about 3 hours ago

### Summary A vulnerability in Coder's OIDC authentication could allow an attacker to bypass the `CODER_OIDC_EMAIL_DOMAIN` verification and create ...

Coder vulnerable to privilege escalation could lead to a cross workspace compromise

GHSA-j6xf-jwrj-v5qp CVE-2025-58437 HIGH published 3 months ago • updated about 5 hours ago

## Summary Insecure session handling opened room for a privilege escalation scenario in which [prebuilt workspaces](https://coder.com/docs/admin/t...

Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token

GHSA-3rw9-wmc8-8948 LOW published 3 months ago • updated 13 days ago

### Summary If users log in to Coder via OIDC, and the OpenID Identity Provider does not return a refresh token, then Coder may allow their web ses...

Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')

GHSA-wcx9-ccpj-hx3c MODERATE published about 1 year ago • updated 13 days ago

### Summary An issue on Coder's login page allows attackers to craft a Coder URL that when clicked by a logged in user could redirect them to a web...

Recent PRs

chore(deps): bump github.com/coder/coder/v2 from 2.25.2 to 2.26.1

coder/terraform-provider-coderd #266

2.25.2 → 2.26.1 Minor PR

Open about 2 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.25.2 to 2.26.0

coder/terraform-provider-coderd #262

2.25.2 → 2.26.0 Minor PR

Open 3 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.25.1 to 2.25.2

coder/terraform-provider-coderd #259

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.14.4 to 2.23.0

coder/envbox #151

2.14.4 → 2.23.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump github.com/coder/coder/v2 from 2.24.1 to 2.25.1

coder/terraform-provider-coderd #244

2.24.1 → 2.25.1 Minor PR

Merged 4 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.24.1 to 2.24.2

coder/terraform-provider-coderd #243

2.24.1 → 2.24.2 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/coder/coder/v2 from 2.23.1 to 2.24.1

coder/terraform-provider-coderd #236

2.23.1 → 2.24.1 Minor PR

Merged 5 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.23.0 to 2.23.1

coder/terraform-provider-coderd #231

2.23.0 → 2.23.1 Patch PR

Merged 5 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.21.3 to 2.22.1

coder/terraform-provider-coderd #225

2.21.3 → 2.22.1 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump github.com/coder/coder/v2 from 2.21.3 to 2.22.0

coder/terraform-provider-coderd #222

2.21.3 → 2.22.0 Minor PR

Open 6 months ago 1 comment

chore(deps): bump github.com/coder/coder/v2 from 2.21.0 to 2.21.3

coder/terraform-provider-coderd #217

2.21.0 → 2.21.3 Patch PR

Open 7 months ago

chore(deps): bump github.com/coder/coder/v2 from 2.10.1-0.20240704130443-c2d44d16a352 to 2.14.4

coder/terraform-provider-envbuilder #61

2.10.1-0.20240704130443-c2d44d16a352 → 2.14.4 Minor PR

Closed about 1 year ago 1 comment

Package Details

Name:	`github.com/coder/coder/v2`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/coder/coder/v2`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 2

MODERATE 1

LOW 1

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/coder/coder
Homepage:	https://github.com/coder/coder
Latest Release:	`v2.23.0` 6 months ago
Dependent Repos:	0
Dependent Packages:	4
Ranking:	Top 10.5606% by dependent repos Top 8.9% by dependent pkgs

PR Status

Open 4 (28.6%)

Merged 4 (28.6%)

Closed 4 (28.6%)

PR Types

Minor 8 (57.1%)

Patch 4 (28.6%)