logo

Database

Sensitive information stored in logs In github.com/coder/coder/v2

Description

Coder logs sensitive objects unsanitized in github.com/coder/coder Coder logs sensitive objects unsanitized in github.com/coder/coder

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2025-664112. NVD-2025-664113. OSV-2025-664114. OSV-GO-2025-41825. GHSA-jf75-p25m-pw746. GCVE-2025-664117. GHSA-jf75-p25m-pw74

References

1. https://github.com/coder/coder/security/advisories/GHSA-jf75-p25m-pw742. https://github.com/coder/coder/pull/209683. https://github.com/coder/coder/commit/06c6abbe0935f9213c1588add60a396da5762e1c4. https://github.com/coder/coder/commit/a75205a559211c8aa494b1a16750d114b263f24a5. https://github.com/coder/coder/commit/e2a46393fce40bc630df3293c1ee66a5962772896. https://github.com/coder/coder/releases/tag/v2.26.57. https://github.com/coder/coder/releases/tag/v2.27.78. https://github.com/coder/coder/releases/tag/v2.28.4

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.