code-server Helm chart
nicholaswildeVerified publisherScored 21 Oct 2026
Run VS Code on any machine anywhere and access it in the browser.
Latest 1.1.1 5 years agodeploys tag version-v3.11.1 14Artifact Hub
code-server 1.1.1 deploys 1 container image: ghcr.io/linuxserver/code-server. Across them, 1,094 findings — 21 critical, 42 high — 2 on CISA KEV. The highest contribution is USN-5488-1 in openssl1.0 1.0.2n-1ubuntu5.7, fixed in 1.0.2n-1ubuntu5.10.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-v3.11.1 | 2142395636 | 18,515 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-56848 | nodejs | no fix listed |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 2.3.2 |
| Low | GHSA-r4fx-v8hh-22mv | vm2 | 3.11.7 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | UBUNTU-CVE-2026-82209 | curl | 7.58.0-2ubuntu3.24+esm14 |
| Low | USN-5849-1 | heimdal | 7.5.0+dfsg-1ubuntu0.4 |
| Low | GO-2022-0289 | stdlib | 1.16.12 |
| Low | UBUNTU-CVE-2024-5642 | python2.7 | no fix listed |
| Low | GO-2023-1840 | stdlib | 1.19.10 |
| Low | USN-5766-1 | heimdal | 7.5.0+dfsg-1ubuntu0.2 |
| Low | UBUNTU-CVE-2026-42497 | perl | no fix listed |
| Low | UBUNTU-CVE-2023-47039 | perl | no fix listed |
| Low | GHSA-2gp3-6c9p-jp7w | code-server | 3.12.0 |
| Low | USN-5587-1 | curl | 7.58.0-2ubuntu3.20 |
| Low | UBUNTU-CVE-2019-1563 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.6.1 |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-42011 | gnutls28 | 3.5.18-1ubuntu1.6+esm4 |
| Low | UBUNTU-CVE-2024-12243 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-9538 | perl | no fix listed |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2020-29562 | glibc | 2.27-3ubuntu1.5 |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | UBUNTU-CVE-2024-6923 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm7 |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | UBUNTU-CVE-2025-24528 | krb5 | no fix listed |
| Low | GHSA-jchw-25xp-jwwc | follow-redirects | 1.15.4 |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GO-2023-2382 | stdlib | 1.20.12 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | GHSA-rv95-896h-c2vc | express | 5.0.0-beta.3 |
| Low | GO-2026-6617 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-19553 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-75803 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2023-7008 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.5.18-1ubuntu1.6+esm4 |
| Low | UBUNTU-CVE-2026-4786 | python2.7 | no fix listed |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | UBUNTU-CVE-2025-15468 | nodejs | no fix listed |
| Low | GO-2026-6608 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2019-20633 | patch | no fix listed |
| Low | UBUNTU-CVE-2026-48615 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2026-93990 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-21636 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2024-4603 | nodejs | no fix listed |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 1.1.13 |
| Low | USN-8670-2 | curl | 7.58.0-2ubuntu3.24+esm12 |
| Low | GO-2026-6607 | stdlib | 1.26.9 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.1latest | 5 years ago | version-v3.11.1 | 2142395636 | 18,515 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.