code-server vulnerabilities (npm)

4 vulnerabilities.

• code-server npm code-server session cookie can be extracted by having user visit specially crafted proxy URL CVE-2025-47269 Fix available EPSS 56.3% 8.3 HighMay 9, 2025
• code-server npm code-server vulnerable to Missing Origin Validation in WebSockets CVE-2023-26114 Fix available 8.2 HighMarch 23, 2023
• code-server npm Cross site scripting in code-server CVE-2021-42648 Fix available 6.1 MediumMay 11, 2022
• code-server npm Inefficient Regular Expression Complexity in cdr/code-server CVE-2021-3810 Fix available 7.5 HighSeptember 17, 2021