Stable: Security Channel (since October 28th, 2024)

Changelog

Security fixes

• Dashboard: Sanitize login redirect (#15221, cb70300)

Resolves an issue which allows attackers to craft a Coder URL that when clicked by a logged in user, could redirect them to a website the attacker controls, e.g. google.com. For details on resolution see this advisory on Github.

Compare: v2.14.3...v2.14.4

Container image

• docker pull ghcr.io/coder/coder:v2.14.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.