openvscode-server 2.7.35 Helm chart
openvscode-server-helmVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Version 2.7.35 10 days agoapp version 1.136.1 0Artifact Hub
openvscode-server 2.7.35 deploys 2 container images: antiantiops/vscode-browser-docker and library/docker. Across them, 380 findings — 2 critical, 10 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38408 in openssh 9.1_p1-r2, fixed in 9.1_p1-r4.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| antiantiops/ | 1.136.1 | 0010127 | 1,069 |
| library/ | 23.0.1-dind | 21044187 | 3,223 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-53612 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-53613 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-53614 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-53615 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-77117 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-80229 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80231 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80255 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80489 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-82208 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | ALPINE-CVE-2025-68160 | openssl | 3.0.19-r0 |
| Low | GO-2026-4403 | stdlib | 1.23.9 |
| Low | GHSA-29wx-vh33-7x7r | github.com/ | 4.5.1 |
| Low | GO-2026-5025 | golang.org/ | 0.55.0 |
| Low | GO-2026-4970 | stdlib | 1.25.12 |
| Low | GHSA-jfvp-7x6p-h2pv | github.com/ | 1.1.14 |
| Low | GO-2026-5027 | golang.org/ | 0.55.0 |
| Low | GO-2026-5029 | golang.org/ | 0.55.0 |
| Low | GO-2026-5030 | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-42250 | bzip2 | 1.0.8-5.1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-32777 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-39113 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-43895 | jq | no fix listed |
| Low | GHSA-m4gq-fm9h-8q75 | github.com/ | 0.21.3 |
| Low | UBUNTU-CVE-2026-35414 | openssh | no fix listed |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | UBUNTU-CVE-2026-76957 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-27456 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-41990 | libgcrypt20 | 1.12.0-2ubuntu0.1~Fips1~rc11 |
| Low | UBUNTU-CVE-2026-45186 | expat | no fix listed |
| Low | GO-2026-5622 | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2026-55655 | openssh | no fix listed |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-32776 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-41080 | expat | no fix listed |
| Low | ALPINE-CVE-2025-69418 | openssl | 3.0.19-r0 |
| Low | UBUNTU-CVE-2025-9403 | jq | no fix listed |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-73281 | openssh | no fix listed |
| Low | GHSA-xjvp-4fhw-gc47 | github.com/ | 1.3.6 |
| Low | GO-2023-2153 | google.golang.org/ | 1.56.3 |
| Low | GO-2023-2412 | github.com/ | 1.6.26 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6061 | google.golang.org/ | 1.82.1 |
| Low | USN-8688-1 | pam | 1.5.3-5ubuntu5.7 |
| Low | UBUNTU-CVE-2025-6141 | ncurses | 6.4+20240113-1ubuntu2.2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.7.37latest | 4 days ago | 1.137.0 | 21056290 | 4,237 |
| 2.7.36 | 5 days ago | 1.136.2 | 21054314 | 4,292 |
| 2.7.35 | 10 days ago | 1.136.1 | 21054314 | 4,292 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.