code-server
v4.145.2VS Code in the browser
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- MITPermissive · OSI-approved
- Security
- 3 advisories2 high, 1 medium
- Supported versions
- No scheduleendoflife.date does not track this project
79.9k stars · 6.9k forks · 156 open issues · last release 8 days ago · data checked 47 minutes ago
Security advisories
All advisories on GitHubThe 3 most recent advisories published by the maintainers: 2 high, 1 medium. Check the patched version against the one you run.
- mediumGHSA-jvcp-w94c-mvvhNov 5, 2026Session cookie exposed to services opened through the port proxy
- Affected
- <= 4.144.0
- Patched in
- 4.145.0
- highCVE-2026-111497Oct 28, 2026Unauthenticated remote code execution through the bundled Node.js Brotli decoder (CVE-2026-111497)
- Affected
- <= 4.141.0
- Patched in
- 4.141.1
- highCVE-2025-47269May 9, 2025Session cookie can be extracted by having user visit specially crafted proxy URL
- Affected
- < 4.99.4
- Patched in
- >= 4.99.4