code-server 1.0.3 Helm chart
deploy-code-serverScored 14 Sept 2026
A Helm chart for cdr/code-server
Version 1.0.3 5 years agoapp version 3.10.2 5Artifact Hub
code-server 1.0.3 deploys 2 container images: library/busybox and codercom/code-server. Across them, 345 findings — 0 critical, 6 high — 1 on CISA KEV. The highest contribution is GHSA-p483-wpfp-42cj in code-server 3.10.2, fixed in 4.99.4.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | latest | 0000 | 0 |
| codercom/ | 3.10.2 | 0681258 | 4,577 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
345 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | GHSA-p483-wpfp-42cj | code-server | 4.99.4 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | GHSA-ffhg-7mh4-33c4 | golang.org/ | 0.0.0-20200220183623-bac4c82f6975 |
| High | GHSA-w457-6q6x-cgp9 | handlebars | 3.0.8 |
| High | GHSA-f2jv-r9rf-7988 | handlebars | 4.7.7 |
| High | DLA-3621-1KEV | nghttp2 | 1.36.0-2+deb10u2 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.7.3 |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb10u3 |
| Medium | DLA-3694-1 | openssh | 1:7.9p1-10+deb10u4 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | DLA-3145-1 | git | 1:2.20.1-2+deb10u4 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | DSA-4963-1 | openssl | 1.1.1d-0+deb10u7 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | DLA-3804-1 | nghttp2 | 1.36.0-2+deb10u3 |
| Medium | DSA-5139-1 | openssl | 1.1.1n-0+deb10u2 |
| Medium | DLA-3532-1 | openssh | 1:7.9p1-10+deb10u3 |
| Medium | DLA-3449-1 | openssl | 1.1.1n-0+deb10u5 |
| Medium | DSA-5103-1 | openssl | 1.1.1d-0+deb10u8 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-xvch-5gv4-984h | minimist | 1.2.6 |
| Medium | GHSA-765h-qjxv-5f44 | handlebars | 4.7.7 |
| Medium | DSA-5140-1 | openldap | 2.4.47+dfsg-3+deb10u7 |
| Medium | DLA-3325-1 | openssl | 1.1.1n-0+deb10u4 |
| Medium | DLA-3282-1 | git | 1:2.20.1-2+deb10u7 |
| Medium | DLA-3272-1 | sudo | 1.8.27-1+deb10u5 |
| Medium | DLA-3844-1 | git | 1:2.20.1-2+deb10u9 |
| Medium | DSA-5111-1 | zlib | 1:1.2.11.dfsg-1+deb10u1 |
| Medium | GHSA-m5h6-hr3q-22h5 | npm | 2.15.1 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | DSA-5085-1 | expat | 2.2.6-2+deb10u3 |
| Medium | DLA-3085-1 | curl | 7.64.0-4+deb10u3 |
| Medium | GHSA-3cqr-58rm-57f8 | handlebars | 3.0.8 |
| Medium | DLA-3182-1 | vim | 2:8.1.0875-5+deb10u3 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-x8qc-rrcw-4r46 | npm | 6.13.3 |
| Medium | GHSA-m6cx-g6qm-p2cx | npm | 6.13.3 |
| Medium | GHSA-9j49-mfvp-vmhm | degenerator | 3.0.1 |
| Medium | GHSA-9j49-mfvp-vmhm | pac-resolver | 5.0.0 |
| Medium | GHSA-qqgx-2p2h-9c37 | ini | 1.3.6 |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | GHSA-p493-635q-r6gr | pug | 3.0.1 |
| Medium | GHSA-74fj-2j2h-c42q | follow-redirects | 1.14.7 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | GHSA-3c6g-pvg8-gqw2 | json | 10.0.0 |
| Medium | DLA-3103-1 | zlib | 1:1.2.11.dfsg-1+deb10u2 |
| Medium | GHSA-r683-j2x4-v87g | node-fetch | 2.6.7 |
| Medium | GHSA-cjjc-xp8v-855w | golang.org/ | 0.0.0-20200124225646-8b5121be2f68 |
| Medium | GHSA-pq67-2wwv-3xjx | tar-fs | 2.1.2 |
| Medium | GHSA-4328-8hgf-7wjr | npm | 6.13.4 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/deploy-code-server/code-server)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.