openvscode-server Helm chart

Name: openvscode-server Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openvscode-server-helm

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 2.7.37 4 days agoapp version 1.137.0 0Artifact Hub

openvscode-server 2.7.37 deploys 2 container images: antiantiops/vscode-browser-docker and library/docker. Across them, 358 findings — 2 critical, 10 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38408 in openssh 9.1_p1-r2, fixed in 9.1_p1-r4.

Radar Score

4,23721056290

358 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
antiantiops/vscode-browser-docker	1.137.0	0012103	1,014
library/docker	23.0.1-dind	21044187	3,223

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

290 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.0.8-r1	3.0.19-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.3	1.2.8
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.2.0	0.52.0
Low	ALPINE-CVE-2024-37370	krb5@1.20.1-r0	1.20.2-r1
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.2.0	0.52.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.4.2	4.5.2
Low	UBUNTU-CVE-2026-82209	curl@8.5.0-2ubuntu10.13	no fix listed
Low	GHSA-4c29-8rgm-jvjj	github.com/moby/buildkit@v0.11.5	0.28.1
Low	GO-2023-1571	stdlib@go1.19.5	1.19.6
Low	UBUNTU-CVE-2026-7210	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GHSA-gc89-7gcr-jxqc	github.com/moby/buildkit@v0.11.2	0.11.4
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.50.1	1.83.1
Low	UBUNTU-CVE-2026-15308	python3.12@3.12.3-1ubuntu0.16	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2026-13608	curl@8.5.0-2ubuntu10.13	no fix listed
Low	UBUNTU-CVE-2026-66046	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-11972	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GO-2023-2102	stdlib@go1.19.5	1.20.10
Low	ALPINE-CVE-2023-0466	openssl@3.0.8-r1	3.0.8-r3
Low	UBUNTU-CVE-2026-80230	curl@8.5.0-2ubuntu10.13	no fix listed
Low	ALPINE-CVE-2023-0465	openssl@3.0.8-r1	3.0.8-r2
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2ubuntu0.2	no fix listed
Low	ALPINE-CVE-2025-69419	openssl@3.0.8-r1	3.0.19-r0
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.3	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.3	1.2.8
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v23.0.1+incompatible	23.0.3
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.2.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.2.0	0.52.0
Low	ALPINE-CVE-2023-1255	openssl@3.0.8-r1	3.0.8-r4
Low	GHSA-4vrq-3vrq-g6gg	github.com/moby/buildkit@v0.11.5	0.28.1
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-f2g3-hh2r-cwgc	github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1	3.1.0
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.4.0	0.13.0
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.2	no fix listed
Low	GO-2023-2185	stdlib@go1.19.5	1.20.11
Low	UBUNTU-CVE-2019-20633	patch@2.7.6-7build3	no fix listed
Low	ALPINE-CVE-2024-4603	openssl@3.0.8-r1	3.0.13-r0
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v23.0.1+incompatible	29.2.0
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-mq39-4gv4-mvpx	github.com/docker/docker@v23.0.1+incompatible	23.0.11
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.3	1.1.5
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-76641	expat@2.6.1-2ubuntu0.4	no fix listed
Low	GO-2023-1703	stdlib@go1.19.5	1.19.8
Low	GHSA-9p26-698r-w4hx	github.com/moby/buildkit@v0.11.5	0.12.5
Low	GO-2026-4341	stdlib@go1.19.5	1.24.12
Low	UBUNTU-CVE-2018-1000021	git@1:2.43.0-1ubuntu7.3	no fix listed
Low	UBUNTU-CVE-2026-17084	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.7.37latest	4 days ago	1.137.0	21056290	4,237
2.7.36	5 days ago	1.136.2	21054314	4,292
2.7.35	10 days ago	1.136.1	21054314	4,292

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openvscode-server-helm/openvscode-server.svg)](https://charts.stackradar.io/charts/openvscode-server-helm/openvscode-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.