Gitpod - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2023-06-05.

Products

• Gitpod - 3 CVEs

Newest CVEs of Gitpod

• CVE-2023-32766 - CVSS 6.1 (medium), 2023-06-05: Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders:…
• CVE-2023-0957 - CVSS 9.6 (critical), 2023-03-03: An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows…
• CVE-2021-35206 - CVSS 6.1 (medium), 2021-06-22: Gitpod before 0.6.0 allows unvalidated redirects.