- Location: https://coder.com/.well-known/security.txt
- Location: https://coder.com/security
Repository navigation
Security: coder/vscode-coder
Security
SECURITY.md
-
Coder VS Code extension allowed a crafted link to inject shell commands into the SSH ProxyCommandGHSA-7r9p-h64p-j4vv published
Oct 13, 2026 by Lisa-FianderHigh -
Coder VS Code extension wrote unvalidated deployment-controlled SSH config options, enabling local command executionGHSA-5jhf-4v56-p5c8 published
Aug 6, 2026 by jdomeracki-coderHigh -
Coder VS Code extension allowed workspace settings to trigger command executionGHSA-9q2g-22gh-hmgg published
Jul 6, 2026 by jdomeracki-coderHigh
Learn more about advisories related to coder/vscode-coder in the GitHub Advisory Database