Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-32766: Release 2022.11.3 · gitpod-io/gitpod

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).

CVE
#xss#vulnerability#git#docker

Skip to content

Sign up

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

Explore

*   All features
*   Documentation
*   GitHub Skills
*   Blog
  • For

    • Enterprise
    • Teams
    • Startups
    • Education

    By Solution

    • CI/CD & Automation
    • DevOps
    • DevSecOps

    Case Studies

    • Customer Stories
    • Resources
    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    

Repositories

*   Topics
*   Trending
*   Collections
  • Pricing

  • In this repository All GitHub

  • No suggested jump to results

  • In this repository All GitHub

  • In this organization All GitHub

  • In this repository All GitHub

Sign in

Sign up

gitpod-io / gitpod Public

  • Notifications
  • Fork 1.1k
  • Star 11k
  • Code
  • Issues 899
  • Pull requests 41
  • Actions
  • Projects
  • Security
  • Insights

More

  1. Releases
  2. 2022.11.3

Latest

Latest

Compare

Choose a tag to compare

corneliusludmann released this

05 Jun 12:24

· 2158 commits to main since this release

2022.11.3

9ae8bfd

Hotfix release with security fixes.

Docker image: eu.gcr.io/gitpod-core-dev/build/installer:release-2022.11.3

Assets 2

Kneba reacted with eyes emoji

1 person reacted

Related news

GHSA-gqx9-h3w2-fprg: Gitpod vulnerable to Cross-site Scripting

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907