codercom/code-server:4.11.0-debian container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of codercom/code-server
codercom/code-server:4.11.0-debian resolved to 1e2cc688008e, scanned 14 Sept 2026: 359 findings, 2 critical, 3 on KEV; deployed by 1 chart, among them portrait.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 1e2cc688008e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2022-0433 | stdlib | 1.17.9 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-v6mx-mf47-r5wg | vm2 | 3.11.4 |
| Medium | GHSA-3h5v-q93c-6h6q | ws | 8.17.1 |
| Medium | GHSA-248r-7h7q-cr24 | vm2 | 3.11.3 |
| Medium | DLA-4087-1 | python3.9 | 3.9.2-1+deb11u3 |
| Medium | DLA-4057-1 | openssh | 1:8.4p1-5+deb11u4 |
| Medium | GHSA-5gfm-wpxj-wjgq | node-forge | 1.3.2 |
| Medium | GO-2021-0243 | stdlib | 1.15.14 |
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | GHSA-m4wx-m65x-ghrr | vm2 | 3.11.4 |
| Medium | GHSA-8cj5-5rvv-wf4v | tar-fs | 2.1.3 |
| Medium | GHSA-99f4-grh7-6pcq | @grpc/ | 1.9.16 |
| Medium | GHSA-m283-3h24-438v | vm2 | 3.11.6 |
| Medium | DLA-4445-1 | python3.9 | 3.9.2-1+deb11u4 |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 8.21.0 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| portraitportraitVerified publisher | 0.2.13 | 4.11.0-debian | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.