CRITICAL9.3npm
GHSA-frjg-g767-7363· CVE-2023-26114code-server vulnerable to Missing Origin Validation in WebSockets
Modified: 9/10/2026
package
pkg:npm/code-server
code-server vulnerable to Missing Origin Validation in WebSockets
Modified: 9/10/2026
Cross site scripting in code-server
Modified: 9/10/2026
Inefficient Regular Expression Complexity in code-server
Modified: 9/10/2026
code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Modified: 9/10/2026