npm

code-server

4 Total advisories

4 Vulnerabilities

0 Malware

Dependency scanning

Check whether code-server is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 8.3

npm

CVE-2025-47269

code-server's session cookie can be extracted by having user visit specially crafted proxy URL

May 9, 2025

CRITICAL 9.3

npm

CVE-2023-26114

code-server vulnerable to Missing Origin Validation in WebSockets

Mar 23, 2023

HIGH 7.5

npm

CVE-2021-3810

Inefficient Regular Expression Complexity in code-server

Sep 20, 2021

MEDIUM 6.1

npm

CVE-2021-42648

Cross site scripting in code-server

May 12, 2022

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes