code-server Helm chart
nicholaswildeVerified publisherScored 21 Oct 2026
Run VS Code on any machine anywhere and access it in the browser.
Latest 1.1.1 5 years agodeploys tag version-v3.11.1 14Artifact Hub
code-server 1.1.1 deploys 1 container image: ghcr.io/linuxserver/code-server. Across them, 1,094 findings — 21 critical, 42 high — 2 on CISA KEV. The highest contribution is USN-5488-1 in openssl1.0 1.0.2n-1ubuntu5.7, fixed in 1.0.2n-1ubuntu5.10.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-v3.11.1 | 2142395636 | 18,515 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2025-59464 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-4873 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-77117 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-80489 | glibc | no fix listed |
| Low | GHSA-r273-hxvj-fxhp | vm2 | 3.11.8 |
| Low | UBUNTU-CVE-2025-68973 | gnupg2 | 2.2.4-1ubuntu1.6+esm2 |
| Low | USN-7542-1 | krb5 | 1.16-2ubuntu0.4+esm5 |
| Low | UBUNTU-CVE-2026-102633 | expat | no fix listed |
| Low | UBUNTU-CVE-2022-3821 | systemd | 237-3ubuntu10.57 |
| Low | UBUNTU-CVE-2016-10739 | glibc | no fix listed |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2026-25210 | expat | 2.2.5-3ubuntu0.9+esm3 |
| Low | UBUNTU-CVE-2026-7168 | curl | 7.58.0-2ubuntu3.24+esm10 |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-95184 | gnutls28 | no fix listed |
| Low | UBUNTU-CVE-2026-58040 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2024-50349 | git | 1:2.17.1-1ubuntu0.18+esm6 |
| Low | UBUNTU-CVE-2026-57176 | python2.7 | no fix listed |
| Low | GHSA-m6fv-jmcg-4jfg | send | 0.19.0 |
| Low | UBUNTU-CVE-2026-21714 | nodejs | no fix listed |
| Low | USN-6543-1 | tar | 1.29b-2ubuntu0.4+esm1 |
| Low | USN-8477-2 | tar | 1.29b-2ubuntu0.4+esm3 |
| Low | GHSA-v27g-jcqj-v8rw | vm2 | 3.11.0 |
| Low | GO-2024-2888 | stdlib | 1.21.11 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
| Low | UBUNTU-CVE-2026-96512 | sudo | no fix listed |
| Low | UBUNTU-CVE-2026-57178 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-58043 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2026-67693 | gnutls28 | no fix listed |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 4.1.1 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | UBUNTU-CVE-2026-19487 | perl | 5.26.1-6ubuntu0.7+esm4 |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 4.2.0 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | UBUNTU-CVE-2026-107708 | krb5 | no fix listed |
| Low | GHSA-qw6h-vgh9-j6wx | express | 5.0.0 |
| Low | UBUNTU-CVE-2024-32021 | git | 1:2.17.1-1ubuntu0.18+esm1 |
| Low | UBUNTU-CVE-2026-57175 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-21712 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2026-49839 | jq | no fix listed |
| Low | UBUNTU-CVE-2026-55653 | openssh | no fix listed |
| Low | UBUNTU-CVE-2025-46836 | net-tools | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | no fix listed |
| Low | UBUNTU-CVE-2026-75806 | openssl | no fix listed |
| Low | UBUNTU-CVE-2026-75806 | nodejs | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.1latest | 5 years ago | version-v3.11.1 | 2142395636 | 18,515 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.