code-server Helm chart
nicholaswildeVerified publisherScored 21 Oct 2026
Run VS Code on any machine anywhere and access it in the browser.
Latest 1.1.1 5 years agodeploys tag version-v3.11.1 14Artifact Hub
code-server 1.1.1 deploys 1 container image: ghcr.io/linuxserver/code-server. Across them, 1,094 findings — 21 critical, 42 high — 2 on CISA KEV. The highest contribution is USN-5488-1 in openssl1.0 1.0.2n-1ubuntu5.7, fixed in 1.0.2n-1ubuntu5.10.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-v3.11.1 | 2142395636 | 18,515 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 8.21.0 |
| Medium | UBUNTU-CVE-2026-27135 | nghttp2 | 1.30.0-1ubuntu1+esm3 |
| Medium | USN-7280-2 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm11 |
| Medium | UBUNTU-CVE-2026-63072 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 |
| Medium | UBUNTU-CVE-2026-63072 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm6 |
| Medium | UBUNTU-CVE-2026-63072 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2021-3999 | glibc | 2.27-3ubuntu1.5 |
| Medium | GHSA-8cj5-5rvv-wf4v | tar-fs | 2.1.3 |
| Medium | UBUNTU-CVE-2025-69420 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| Medium | UBUNTU-CVE-2025-69420 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-8927 | curl | 7.58.0-2ubuntu3.24+esm9 |
| Medium | UBUNTU-CVE-2022-3116 | heimdal | 7.5.0+dfsg-1ubuntu0.1 |
| Medium | USN-7015-3 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm6 |
| Medium | UBUNTU-CVE-2025-46835 | git | 1:2.17.1-1ubuntu0.18+esm4 |
| Medium | UBUNTU-CVE-2026-28388 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 |
| Medium | UBUNTU-CVE-2026-28388 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-28388 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm4 |
| Medium | UBUNTU-CVE-2022-27774 | curl | 7.58.0-2ubuntu3.17 |
| Medium | UBUNTU-CVE-2023-28321 | curl | 7.58.0-2ubuntu3.24+esm1 |
| Medium | UBUNTU-CVE-2023-27535 | curl | 7.58.0-2ubuntu3.24 |
| Medium | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Medium | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | UBUNTU-CVE-2017-18207 | python2.7 | no fix listed |
| Medium | UBUNTU-CVE-2023-27536 | curl | 7.58.0-2ubuntu3.24 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | UBUNTU-CVE-2024-22025 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-28387 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 |
| Medium | UBUNTU-CVE-2026-28387 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-11940 | python2.7 | no fix listed |
| Medium | GHSA-gmc2-2x9w-cgh9 | vm2 | 3.11.6 |
| Medium | GO-2026-4601 | stdlib | 1.25.8 |
| Medium | UBUNTU-CVE-2019-17595 | ncurses | 6.1-1ubuntu1.18.04.1 |
| Medium | UBUNTU-CVE-2024-52005 | git | no fix listed |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GO-2026-4981 | stdlib | 1.25.10 |
| Medium | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Medium | UBUNTU-CVE-2026-28389 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-28389 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm4 |
| Medium | UBUNTU-CVE-2026-28389 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 |
| Medium | UBUNTU-CVE-2026-28390 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm4 |
| Medium | UBUNTU-CVE-2026-28390 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 |
| Medium | UBUNTU-CVE-2026-28390 | nodejs | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.1latest | 5 years ago | version-v3.11.1 | 2142395636 | 18,515 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.