Versions in this module Expand all Collapse all v2 v2.26.0 Sep 3, 2025 v2.25.3 Oct 1, 2025 v2.25.0 Aug 5, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.24.3 Aug 7, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.24.2 Jul 15, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.24.1 Jul 2, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.24.0 Jul 1, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.23.4 Jul 15, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.23.3 Jul 8, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.23.2 Jun 30, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.23.1 Jun 10, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.23.0 Jun 3, 2025 GO-2025-3938 GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.22.1 May 20, 2025 GO-2025-3921 +1 more GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.22.0 May 15, 2025 GO-2025-3921 +1 more GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder v2.21.3 Apr 29, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.21.2 Apr 24, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.21.1 Apr 23, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.21.0 Apr 2, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.20.3 Apr 29, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.20.2 Mar 17, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.20.1 Mar 15, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.20.0 Mar 4, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.19.3 Apr 29, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.19.2 Apr 23, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.19.1 Mar 6, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.19.0 Feb 4, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.18.5 Jan 29, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.18.4 Jan 23, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.18.3 Jan 18, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.18.2 Jan 7, 2025 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.18.1 Dec 16, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.18.0 Dec 3, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.17.3 Dec 12, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.17.2 Nov 8, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.17.1 Nov 8, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.17.0 Nov 4, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.16.1 Oct 24, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.16.0 Oct 1, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.15.4 Oct 28, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.15.3 Oct 8, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.15.2 Oct 8, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.15.1 Oct 1, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.15.0 Sep 3, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.14.4 Oct 24, 2024 GO-2025-3921 GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.14.3 Sep 5, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.14.2 Aug 20, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.14.1 Aug 7, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.14.0 Aug 6, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.13.5 Aug 20, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.13.4 Aug 6, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.13.3 Aug 1, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.13.2 Jul 23, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.13.1 Jul 18, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.13.0 Jul 2, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.6 Aug 1, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.5 Jul 22, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.4 Jul 18, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.3 Jun 24, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.2 Jun 21, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.1 Jun 6, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.12.0 Jun 4, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.11.4 Jun 24, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.11.3 Jun 21, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.11.2 May 22, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.11.1 May 16, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.11.0 May 6, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.10.3 May 22, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.10.2 Apr 22, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.10.1 Apr 17, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.10.0 Apr 3, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.9.4 Apr 22, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.9.3 Apr 17, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.9.2 Apr 5, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.9.1 Mar 19, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.9.0 Mar 12, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.8.5 Mar 9, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.8.4 Mar 4, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.8.3 Feb 15, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.8.2 Feb 12, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.8.1 Feb 7, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.8.0 Feb 7, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.7.3 Mar 4, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.7.2 Jan 24, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.7.1 Jan 22, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.7.0 Jan 19, 2024 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.6.1 Mar 4, 2024 GO-2024-3228 +1 more GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.6.0 Dec 21, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.5.1 Dec 14, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.5.0 Dec 12, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.4.0 Nov 17, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.3.3 Oct 30, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.3.2 Oct 20, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.3.1 Oct 17, 2023 GO-2024-2602 +2 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.3.0 Oct 11, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.2.1 Oct 4, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.2.0 Sep 27, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.1.5 Sep 5, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.1.4 Aug 28, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.1.3 Aug 24, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.1.2 Aug 23, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder v2.1.1 Aug 22, 2023 GO-2024-2602 +1 more GO-2024-2602: Incorrect email domain verification in github.com/coder/coder GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder Changes in this version + var Regions = []Region + func New(ctx context.Context, logger slog.Logger, customTunnelHost string) (*tunnelsdk.Tunnel, error) + func NewWithConfig(ctx context.Context, logger slog.Logger, cfg Config) (*tunnelsdk.Tunnel, error) + type Config struct + HTTPClient *http.Client + PrivateKey device.NoisePrivateKey + PublicKey device.NoisePublicKey + Tunnel Node + Version tunnelsdk.TunnelVersion + func GenerateConfig(customTunnelHost string) (Config, error) + type Node struct + AvgLatency time.Duration + HostnameHTTPS string + ID int + RegionID int + func FindClosestNode(nodes []Node) (Node, error) + func Nodes(customTunnelHost string) ([]Node, error) + type Region struct + ID int + LocationName string + Nodes []Node Other modules containing this package github.com/coder/coder