files

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Aug 5, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 15, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 2, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 1, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Changes in this version

type Cache

+ func New(registerer prometheus.Registerer, authz rbac.Authorizer) *Cache

+ type CacheCloser struct

+ func NewCacheCloser(cache FileAcquirer) *CacheCloser

+ func (c *CacheCloser) Acquire(ctx context.Context, db database.Store, fileID uuid.UUID) (*CloseFS, error)

+ func (c *CacheCloser) Close()

+ type CacheEntryValue struct

+ Object rbac.Object

+ Size int64

+ type CloseFS struct

+ func (f *CloseFS) Close()

+ type FileAcquirer interface

+ Acquire func(ctx context.Context, db database.Store, fileID uuid.UUID) (*CloseFS, error)

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 15, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 8, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 30, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 10, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 3, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Changes in this version

+ func NewOverlayFS(baseFS fs.FS, overlays []Overlay) fs.FS

type Cache

+ func (c *Cache) Count() int

+ type Overlay struct

+ Path string

May 20, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

May 15, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Changes in this version

+ type Cache struct

+ func NewFromStore(store database.Store) Cache

+ func (c *Cache) Acquire(ctx context.Context, fileID uuid.UUID) (fs.FS, error)

+ func (c *Cache) Release(fileID uuid.UUID)