GO-2025-4182
NoneCVSS
—
EPSS
—
Published
Dec 8, 2025
CISA due date
—
The record
Coder logs sensitive objects unsanitized in github.com/coder/coder
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/coder/coder | 0 | No fix |
| Go | github.com/coder/coder/v2 | 0 | 2.26.5 |
| Go | github.com/coder/coder/v2 | 2.27.0 | 2.27.7 |
| Go | github.com/coder/coder/v2 | 2.28.0 | 2.28.4 |
| go | github.com/coder/coder/v2 | 2.27.0 | 2.27.7 |
| go | github.com/coder/coder/v2 | 2.28.0 | 2.28.4 |