GHSA-8fxq-53rx-ph5fPublished
Coder before 2.34.2 User Enumeration via Login Placeholder Hash
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111933 · Microsoft / collected KEV context
cve-program · CVE-2026-111933
- https://github.com/coder/coder/security/advisories/GHSA-8fxq-53rx-ph5f
- https://www.vulncheck.com/advisories/coder-before-2.34.2-user-enumeration-via-login-placeholder-hash
euvd · EUVD-2026-103300
- https://github.com/coder/coder/security/advisories/GHSA-8fxq-53rx-ph5f
- https://www.vulncheck.com/advisories/coder-before-2.34.2-user-enumeration-via-login-placeholder-hash
nvd · CVE-2026-111933
- https://github.com/coder/coder/security/advisories/GHSA-8fxq-53rx-ph5f
- https://www.vulncheck.com/advisories/coder-before-2.34.2-user-enumeration-via-login-placeholder-hash
osv · GHSA-8fxq-53rx-ph5f
- https://github.com/coder/coder/security/advisories/GHSA-8fxq-53rx-ph5f
- https://github.com/coder/coder/pull/26205
- https://github.com/coder/coder/commit/35a7dc8ab9c7f15ce05d963947823ee31224512f
- https://github.com/coder/coder
- https://github.com/coder/coder/releases/tag/v2.29.17
- https://github.com/coder/coder/releases/tag/v2.32.7
- https://github.com/coder/coder/releases/tag/v2.33.8
- https://github.com/coder/coder/releases/tag/v2.34.2
osv · GO-2026-6265
- https://github.com/coder/coder/security/advisories/GHSA-8fxq-53rx-ph5f
- https://github.com/coder/coder/commit/35a7dc8ab9c7f15ce05d963947823ee31224512f
- https://github.com/coder/coder/pull/26205
- https://github.com/coder/coder/releases/tag/v2.29.17
- https://github.com/coder/coder/releases/tag/v2.32.7
- https://github.com/coder/coder/releases/tag/v2.33.8
- https://github.com/coder/coder/releases/tag/v2.34.2
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.