Affected by GO-2024-3228 and 2 other vulnerabilities

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

The highest tagged major version is v2.

gorules

package module

v0.3.5 Latest Latest Go to latest Published: Apr 5, 2022 License: AGPL-3.0 Imports: 1 Imported by: 0

Details

There is no documentation for this package.

Path	Synopsis
agent
usershell
cli
buildinfo
cliflag Package cliflag extends flagset with environment variable defaults.	Package cliflag extends flagset with environment variable defaults.
clitest
cliui
config
cmd
cliui command
coder command
templater command
coderd
autostart/schedule package schedule provides utilities for parsing and deserializing cron-style expressions.	package schedule provides utilities for parsing and deserializing cron-style expressions.
awsidentity
coderdtest
database Package database connects to external services for stateful storage.	Package database connects to external services for stateful storage.
database/databasefake
database/dump command
database/postgres
httpapi
httpmw
parameter
tunnel
userpassword
codersdk
cryptorand
examples
peer
peerbroker
proto
provisioner
echo
terraform
provisionerd
proto
provisionersdk
proto
pty
ptytest
scripts
datadog-cireport command
site