Skip to content

Product

sourcegraph cody vulnerabilities

1 published CVE affecting sourcegraph cody, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest sourcegraph cody CVEs

Newest publication first

  1. CVE-2023-46248 Overwrite of builtin Cody commands facilitates RCE

    Published
    HighCVSS 8.8

    Cody is an artificial intelligence (AI) coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscod...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.