high8.3
CVE-2026-118687
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
coder · coder / coder · coder
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.