tocsin

Go/github.com/coder/coder/v2 CVE-2024-58398: unknown, EPSS 0.27%

Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Action: Upgrade github.com/coder/coder/v2 to 2.14.4 or later.

go get github.com/coder/coder/v2@v2.14.4
go get github.com/coder/coder/v2@v2.15.3
go get github.com/coder/coder/v2@v2.16.1

Affected

introducedfixedlast affected
2.3.12.14.4-
2.15.02.15.3-
2.16.02.16.1-

Fixed versions

2.14.42.15.32.16.1

Sources

CVE-2024-58398 · published · modified · JSON