codercom/code-server:4.11.0-debian container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of codercom/code-server

codercom/code-server:4.11.0-debian resolved to 1e2cc688008e, scanned 14 Sept 2026: 359 findings, 2 critical, 3 on KEV; deployed by 1 chart, among them portrait.

Radar Score

4,6812772278

359 findings on digest 1e2cc688008e · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
4.11.0-debianresolves to	1e2cc688008e	1 chart	8 days ago	2772278	4,681

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

359 distinct on this digest

Findings for digest 1e2cc688008e as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-9qj6-qjgg-37qq	vm2@3.9.11	3.11.2
Medium	GHSA-9vg3-4rfj-wgcm	vm2@3.9.11	3.11.2
Medium	GHSA-76w7-j9cq-rx2j	vm2@3.9.11	3.11.4
Medium	GHSA-xq3m-2v4x-88gg	protobufjs@6.11.3	7.5.5
Medium	GHSA-8hg8-63c5-gwmx	vm2@3.9.11	3.11.1
Medium	GHSA-6q6q-88xp-6f2r	gopkg.in/yaml.v2@v2.2.1	2.2.4
Medium	GHSA-9prh-257w-9277	handlebars@1.0.0	4.0.0
Medium	GHSA-55hx-c926-fr95	vm2@3.9.11	3.11.0
Medium	GHSA-cfcw-xp6x-25gj	vm2@3.9.11	3.11.6
Medium	GO-2022-0433	stdlib@go1.14.4	1.17.9
Medium	GHSA-grv7-fg5c-xmjg	braces@3.0.2	3.0.3
Medium	GHSA-v6mx-mf47-r5wg	vm2@3.9.11	3.11.4
Medium	GHSA-3h5v-q93c-6h6q	ws@8.2.0	8.17.1
Medium	GHSA-248r-7h7q-cr24	vm2@3.9.11	3.11.3
Medium	DLA-4087-1	python3.9@3.9.2-1	3.9.2-1+deb11u3
Medium	DLA-4057-1	openssh@1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u4
Medium	GHSA-5gfm-wpxj-wjgq	node-forge@1.3.1	1.3.2
Medium	GO-2021-0243	stdlib@go1.14.4	1.15.14
Medium	GO-2022-0273	stdlib@go1.14.4	1.16.8
Medium	GHSA-37ch-88jc-xwx2	path-to-regexp@0.1.7	0.1.13
Medium	GHSA-9wv6-86v2-598j	path-to-regexp@0.1.7	0.1.10
Medium	GHSA-m4wx-m65x-ghrr	vm2@3.9.11	3.11.4
Medium	GHSA-8cj5-5rvv-wf4v	tar-fs@2.1.1	2.1.3
Medium	GHSA-99f4-grh7-6pcq	@grpc/grpc-js@1.6.12	1.9.16
Medium	GHSA-m283-3h24-438v	vm2@3.9.11	3.11.6
Medium	DLA-4445-1	python3.9@3.9.2-1	3.9.2-1+deb11u4
Medium	GHSA-vj76-c3g6-qr5v	tar-fs@2.1.1	2.1.4
Medium	GO-2022-1144	stdlib@go1.14.4	1.18.9
Medium	GHSA-qwcr-r2fm-qrc7	body-parser@1.19.0	1.20.3
Medium	GHSA-96hv-2xvq-fx4p	ws@8.2.0	8.21.0
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.1.2	3.1.3
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.11	7.5.7
Low	GO-2021-0142	stdlib@go1.14.4	1.13.15
Low	GO-2021-0263	stdlib@go1.14.4	1.16.10
Low	GO-2023-1571	stdlib@go1.14.4	1.19.6
Low	GHSA-cxjh-pqwp-8mfp	follow-redirects@1.14.8	1.15.6
Low	GHSA-hw58-p9xv-2mjh	vm2@3.9.11	3.11.0
Low	GHSA-554w-wpv2-vw27	node-forge@1.3.1	1.3.2
Low	DLA-4235-1	sudo@1.9.5p2-3+deb11u1	1.9.5p2-3+deb11u2
Low	GHSA-685m-2w69-288q	protobufjs@6.11.3	7.5.6
Low	GHSA-75px-5xx7-5xc7	protobufjs@6.11.3	7.5.6
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GO-2022-0435	stdlib@go1.14.4	1.17.9
Low	GHSA-5375-pq7m-f5r2	@grpc/grpc-js@1.6.12	1.9.16
Low	GHSA-gmc2-2x9w-cgh9	vm2@3.9.11	3.11.6
Low	GHSA-f5x3-32g6-xq36	tar@6.1.11	6.2.1
Low	GHSA-j8xg-fqg3-53r7	word-wrap@1.2.3	1.2.4
Low	GO-2022-0288	stdlib@go1.14.4	1.16.12
Low	GHSA-5m6q-g25r-mvwx	node-forge@1.3.1	1.4.0

Used by

1 chart

Chart	Version	Tag	Containers
portraitportraitVerified publisher	0.2.13	4.11.0-debian	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.