CVE-2023-26114
1 advisory.
npm/code-server CVE-2023-26114: critical 9.3, EPSS 0.34%
code-server vulnerable to Missing Origin Validation in WebSockets
Action: Upgrade code-server to 4.10.1 or later.
npm i code-server@4.10.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.1 | - |
Fixed versions
| 4.10.1 |
Sources
- osv: GHSA-frjg-g767-7363
- https://nvd.nist.gov/vuln/detail/CVE-2023-26114
- https://github.com/coder/code-server/commit/d477972c68fc8c8e8d610aa7287db87ba90e55c7
- https://github.com/coder/code-server
- https://github.com/coder/code-server/releases/tag/v4.10.1
- https://security.snyk.io/vuln/SNYK-JS-CODESERVER-3368148
CVE-2023-26114 · published · modified · JSON