Threats Tagged 'ghsa-84rm-42xw-mx52'
View all threats tagged with 'ghsa-84rm-42xw-mx52'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-84rm-42xw-mx52'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-84rm-42xw-mx52: Coder's AI Bridge Proxy skips TLS certificate verification in default configurationCVE-2026-55436 0 The AI Bridge Proxy component in Coder's software (aibridgeproxyd) had a default configuration that skipped TLS certificate verification for outbound HTTPS connections when no upstream proxy was configured. This allowed an attacker with a man-in-the-middle position between the proxy and the Coder server to intercept sensitive data including session tokens, API keys, and request/response contents. The issue affects versions starting from 2.30.0 up to but not including patched versions in the 2.32.7, 2.33.8, and 2.34.2 releases. The vulnerability is fixed by enforcing secure TLS transport unconditionally. Workarounds include securing the network path or using trusted certificates. The vulnerability is rated high severity. Join the discussion | GCVE Database | 07/06/2026, 21:12:05 UTC Added: 07/06/2026, 23:02:26 UTC |
Showing 1 to 1 of 1 result