codercom/code-server:3.10.2 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of codercom/code-server
codercom/code-server:3.10.2 resolved to 47605610ad8d, scanned 14 Sept 2026: 345 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them code-server.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
345 distinct on this digest
Findings for digest 47605610ad8d as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | GHSA-p483-wpfp-42cj | code-server | 4.99.4 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | GHSA-ffhg-7mh4-33c4 | golang.org/ | 0.0.0-20200220183623-bac4c82f6975 |
| High | GHSA-w457-6q6x-cgp9 | handlebars | 3.0.8 |
| High | GHSA-f2jv-r9rf-7988 | handlebars | 4.7.7 |
| High | DLA-3621-1KEV | nghttp2 | 1.36.0-2+deb10u2 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.7.3 |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb10u3 |
| Medium | DLA-3694-1 | openssh | 1:7.9p1-10+deb10u4 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | DLA-3145-1 | git | 1:2.20.1-2+deb10u4 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | DSA-4963-1 | openssl | 1.1.1d-0+deb10u7 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | DLA-3804-1 | nghttp2 | 1.36.0-2+deb10u3 |
| Medium | DSA-5139-1 | openssl | 1.1.1n-0+deb10u2 |
| Medium | DLA-3532-1 | openssh | 1:7.9p1-10+deb10u3 |
| Medium | DLA-3449-1 | openssl | 1.1.1n-0+deb10u5 |
| Medium | DSA-5103-1 | openssl | 1.1.1d-0+deb10u8 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-xvch-5gv4-984h | minimist | 1.2.6 |
| Medium | GHSA-765h-qjxv-5f44 | handlebars | 4.7.7 |
| Medium | DSA-5140-1 | openldap | 2.4.47+dfsg-3+deb10u7 |
| Medium | DLA-3325-1 | openssl | 1.1.1n-0+deb10u4 |
| Medium | DLA-3282-1 | git | 1:2.20.1-2+deb10u7 |
| Medium | DLA-3272-1 | sudo | 1.8.27-1+deb10u5 |
| Medium | DLA-3844-1 | git | 1:2.20.1-2+deb10u9 |
| Medium | DSA-5111-1 | zlib | 1:1.2.11.dfsg-1+deb10u1 |
| Medium | GHSA-m5h6-hr3q-22h5 | npm | 2.15.1 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | DSA-5085-1 | expat | 2.2.6-2+deb10u3 |
| Medium | DLA-3085-1 | curl | 7.64.0-4+deb10u3 |
| Medium | GHSA-3cqr-58rm-57f8 | handlebars | 3.0.8 |
| Medium | DLA-3182-1 | vim | 2:8.1.0875-5+deb10u3 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-x8qc-rrcw-4r46 | npm | 6.13.3 |
| Medium | GHSA-m6cx-g6qm-p2cx | npm | 6.13.3 |
| Medium | GHSA-9j49-mfvp-vmhm | degenerator | 3.0.1 |
| Medium | GHSA-9j49-mfvp-vmhm | pac-resolver | 5.0.0 |
| Medium | GHSA-qqgx-2p2h-9c37 | ini | 1.3.6 |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | GHSA-p493-635q-r6gr | pug | 3.0.1 |
| Medium | GHSA-74fj-2j2h-c42q | follow-redirects | 1.14.7 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | GHSA-3c6g-pvg8-gqw2 | json | 10.0.0 |
| Medium | DLA-3103-1 | zlib | 1:1.2.11.dfsg-1+deb10u2 |
| Medium | GHSA-r683-j2x4-v87g | node-fetch | 2.6.7 |
| Medium | GHSA-cjjc-xp8v-855w | golang.org/ | 0.0.0-20200124225646-8b5121be2f68 |
| Medium | GHSA-pq67-2wwv-3xjx | tar-fs | 2.1.2 |
| Medium | GHSA-4328-8hgf-7wjr | npm | 6.13.4 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| code-serverdeploy-code-server | 1.0.3 | 3.10.2 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.