openvscode-server Helm chart
openvscode-server-helmVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 2.7.37 4 days agoapp version 1.137.0 0Artifact Hub
openvscode-server 2.7.37 deploys 2 container images: antiantiops/vscode-browser-docker and library/docker. Across them, 358 findings — 2 critical, 10 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38408 in openssh 9.1_p1-r2, fixed in 9.1_p1-r4.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| antiantiops/ | 1.137.0 | 0012103 | 1,014 |
| library/ | 23.0.1-dind | 21044187 | 3,223 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2025-3447 | stdlib | 1.22.12 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
| Low | GO-2026-4869 | stdlib | 1.25.9 |
| Low | GO-2026-4340 | stdlib | 1.24.12 |
| Low | GO-2025-4175 | stdlib | 1.24.11 |
| Low | UBUNTU-CVE-2026-73282 | openssh | no fix listed |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-54679 | jq | no fix listed |
| Low | GHSA-7ww5-4wqc-m92c | github.com/ | 1.6.26 |
| Low | GHSA-jq35-85cj-fj4p | github.com/ | 23.0.8 |
| Low | UBUNTU-CVE-2026-19499 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-19542 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-77117 | glibc | 2.39-0ubuntu8.9 |
| Low | UBUNTU-CVE-2026-80489 | glibc | 2.39-0ubuntu8.9 |
| Low | ALPINE-CVE-2025-68160 | openssl | 3.0.19-r0 |
| Low | GO-2026-4403 | stdlib | 1.23.9 |
| Low | GHSA-29wx-vh33-7x7r | github.com/ | 4.5.1 |
| Low | GO-2026-5025 | golang.org/ | 0.55.0 |
| Low | GO-2026-4970 | stdlib | 1.25.12 |
| Low | GHSA-jfvp-7x6p-h2pv | github.com/ | 1.1.14 |
| Low | GO-2026-5027 | golang.org/ | 0.55.0 |
| Low | GO-2026-5029 | golang.org/ | 0.55.0 |
| Low | GO-2026-5030 | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-32777 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-39113 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-43895 | jq | no fix listed |
| Low | GHSA-m4gq-fm9h-8q75 | github.com/ | 0.21.3 |
| Low | UBUNTU-CVE-2026-35414 | openssh | no fix listed |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | UBUNTU-CVE-2026-76957 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-41990 | libgcrypt20 | 1.12.0-2ubuntu0.1~Fips1~rc11 |
| Low | UBUNTU-CVE-2026-45186 | expat | no fix listed |
| Low | GO-2026-5622 | github.com/ | no fix listed |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-32776 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-41080 | expat | no fix listed |
| Low | ALPINE-CVE-2025-69418 | openssl | 3.0.19-r0 |
| Low | UBUNTU-CVE-2025-9403 | jq | no fix listed |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-73281 | openssh | no fix listed |
| Low | GHSA-xjvp-4fhw-gc47 | github.com/ | 1.3.6 |
| Low | GO-2023-2153 | google.golang.org/ | 1.56.3 |
| Low | GO-2023-2412 | github.com/ | 1.6.26 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2026-6061 | google.golang.org/ | 1.82.1 |
| Low | GHSA-4vq8-7jfc-9cvp | github.com/ | 25.0.13 |
| Low | GHSA-m8cg-xc2p-r3fc | github.com/ | 1.1.5 |
| Low | UBUNTU-CVE-2025-66382 | expat | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.7.37latest | 4 days ago | 1.137.0 | 21056290 | 4,237 |
| 2.7.36 | 5 days ago | 1.136.2 | 21054314 | 4,292 |
| 2.7.35 | 10 days ago | 1.136.1 | 21054314 | 4,292 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.