Affected by GO-2024-3228 and 2 other vulnerabilities

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

The highest tagged major version is v2.

gorules

package module

v0.5.9 Latest Latest Go to latest Published: May 17, 2022 License: AGPL-3.0 Imports: 1 Imported by: 0

Details

There is no documentation for this package.

Path	Synopsis
agent
usershell
buildinfo
cli
cliflag Package cliflag extends flagset with environment variable defaults.	Package cliflag extends flagset with environment variable defaults.
clitest
cliui
config
cmd
cliui command
coder command
coderd
audit
audit/backends
autobuild/executor
autobuild/notify
autobuild/schedule package schedule provides utilities for parsing and deserializing cron-style expressions.	package schedule provides utilities for parsing and deserializing cron-style expressions.
awsidentity
azureidentity
coderdtest
database Package database connects to external services for stateful storage.	Package database connects to external services for stateful storage.
database/databasefake
database/dump command
database/postgres
devtunnel
gitsshkey
httpapi
httpmw
parameter
rbac
turnconn
userpassword
codersdk
cryptorand
examples
peer
peerbroker
proto
provisioner
echo
terraform
provisionerd
proto
provisionersdk
proto
pty
ptytest
scripts
apitypings command
auditgen command
datadog-cireport command
site