GO-2025-3991
NoneCVSS
—
EPSS
—
Published
Oct 23, 2025
CISA due date
—
The record
Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/coder/agentapi | 0 | 0.4.0 |