Affected by GO-2024-3228 and 17 other vulnerabilities

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

GO-2025-4182: Coder logs sensitive objects unsanitized in github.com/coder/coder

GO-2026-5169: Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder

GO-2026-5196: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder

GO-2026-5897: Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder

GO-2026-5906: Coder: User-admin role can reset owner account password in github.com/coder/coder

GO-2026-5907: Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking in github.com/coder/coder

GO-2026-5908: Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass in github.com/coder/coder

GO-2026-5909: Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID in github.com/coder/coder

GO-2026-5913: Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` in github.com/coder/coder

GO-2026-5915: Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator in github.com/coder/coder

GO-2026-5917: Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access in github.com/coder/coder

GO-2026-5918: Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder

GO-2026-5919: Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component in github.com/coder/coder

GO-2026-5922: Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder

GO-2026-5924: Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder

GO-2026-5926: Coder's sub-agent app registration bypasses template port-sharing policy enforcement in github.com/coder/coder

agentproc

package

v2.13.2 Latest Latest Go to latest Published: Jul 23, 2024 License: AGPL-3.0 Imports: 9 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coder/coder

Links

Open Source Insights

Documentation ¶

Rendered for

Overview ¶

Package agentproc contains logic for interfacing with local processes running in the same context as the agent.

Index ¶

type Process
- func List(fs afero.Fs, syscaller Syscaller) ([]*Process, error)
type Syscaller
- func NewSyscaller() Syscaller
type UnixSyscaller

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Process ¶

type Process struct {
	Dir         string
	CmdLine     string
	PID         int32
	OOMScoreAdj int
}

func List ¶

func List(fs afero.Fs, syscaller Syscaller) ([]*Process, error)

func (*Process) Cmd ¶

func (p *Process) Cmd() string

func (*Process) Niceness ¶

func (p *Process) Niceness(sc Syscaller) (int, error)

func (*Process) SetNiceness ¶

func (p *Process) SetNiceness(sc Syscaller, score int) error

type Syscaller ¶

type Syscaller interface {
	SetPriority(pid int32, priority int) error
	GetPriority(pid int32) (int, error)
	Kill(pid int32, sig syscall.Signal) error
}

func NewSyscaller ¶

func NewSyscaller() Syscaller

type UnixSyscaller ¶

type UnixSyscaller struct{}

func (UnixSyscaller) GetPriority ¶

func (UnixSyscaller) GetPriority(pid int32) (int, error)

func (UnixSyscaller) Kill ¶

func (UnixSyscaller) Kill(pid int32, sig syscall.Signal) error

func (UnixSyscaller) SetPriority ¶

func (UnixSyscaller) SetPriority(pid int32, nice int) error

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
agentproctest Package agentproctest contains utility functions for testing process management in the agent.	Package agentproctest contains utility functions for testing process management in the agent.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL