ghcr.io/linuxserver/code-server:version-v3.11.1 container image

GitHub Container Registry

Scanned 19 Sept 2026

Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/code-server

ghcr.io/linuxserver/code-server:version-v3.11.1 resolved to a385ba5cb161, scanned 19 Sept 2026: 988 findings, 18 critical, 2 on KEV; deployed by 1 chart, among them code-server.

Radar Score

16,3751843315612

988 findings on digest a385ba5cb161 · scanned 19 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
version-v3.11.1resolves to	a385ba5cb161	1 chart	today	1843315612	16,375

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

988 distinct on this digest

Findings for digest a385ba5cb161 as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2022-2068	openssl1.0@1.0.2n-1ubuntu5.7	1.0.2n-1ubuntu5.10
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.19
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.fips.2.1~18.04.13.2
Critical	UBUNTU-CVE-2022-1292	openssl1.0@1.0.2n-1ubuntu5.7	1.0.2n-1ubuntu5.9
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.17
Critical	UBUNTU-CVE-2023-38408	openssh@1:7.6p1-4ubuntu0.5	1:7.6p1-4ubuntu0.7+esm1
Critical	GHSA-ch3r-j5x3-6q2m	vm2@3.9.3	3.9.17
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.45+dfsg-1ubuntu1.10	2.4.45+dfsg-1ubuntu1.11
Critical	GHSA-7jxr-cg7f-gpgv	vm2@3.9.3	3.9.15
Critical	UBUNTU-CVE-2022-23521	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.15
Critical	UBUNTU-CVE-2025-48384KEV	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm2
Critical	GHSA-mrgp-mrhc-5jrq	vm2@3.9.3	3.9.11
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
Critical	UBUNTU-CVE-2022-41903	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.15
Critical	UBUNTU-CVE-2019-9514	nodejs@14.17.6-1nodesource1	no fix listed
Critical	UBUNTU-CVE-2019-9513	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
Critical	UBUNTU-CVE-2019-9513	nodejs@14.17.6-1nodesource1	no fix listed
Critical	UBUNTU-CVE-2024-2961	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm2
High	UBUNTU-CVE-2022-25236	expat@2.2.5-3ubuntu0.2	2.2.5-3ubuntu0.4
High	UBUNTU-CVE-2025-6965	sqlite3@3.22.0-1ubuntu0.4	3.22.0-1ubuntu0.7+esm2
High	UBUNTU-CVE-2025-15467	nodejs@14.17.6-1nodesource1	no fix listed
High	UBUNTU-CVE-2021-22883	nodejs@14.17.6-1nodesource1	no fix listed
High	UBUNTU-CVE-2022-0778	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.15
High	UBUNTU-CVE-2022-0778	openssl1.0@1.0.2n-1ubuntu5.7	1.0.2n-1ubuntu5.8
High	UBUNTU-CVE-2024-6119	nodejs@14.17.6-1nodesource1	no fix listed
High	UBUNTU-CVE-2023-22809	sudo@1.8.21p2-3ubuntu1.4	1.8.21p2-3ubuntu1.5
High	UBUNTU-CVE-2007-4559	python2.7@2.7.17-1~18.04ubuntu1.6	no fix listed
High	UBUNTU-CVE-2019-9511	nodejs@14.17.6-1nodesource1	no fix listed
High	UBUNTU-CVE-2019-9511	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	GHSA-p483-wpfp-42cj	code-server@3.11.1	4.99.4
High	UBUNTU-CVE-2023-0286	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.21
High	UBUNTU-CVE-2023-0286	openssl1.0@1.0.2n-1ubuntu5.7	1.0.2n-1ubuntu5.11
High	UBUNTU-CVE-2024-2398	curl@7.58.0-2ubuntu3.14	7.58.0-2ubuntu3.24+esm4
High	UBUNTU-CVE-2023-25652	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.1
High	UBUNTU-CVE-2021-23840	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.fips.2.1~18.04.9.1
High	UBUNTU-CVE-2024-32002	git@1:2.17.1-1ubuntu0.8	1:2.17.1-1ubuntu0.18+esm1
High	UBUNTU-CVE-2023-2650	openssl1.0@1.0.2n-1ubuntu5.7	1.0.2n-1ubuntu5.13
High	UBUNTU-CVE-2023-2650	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.23
High	UBUNTU-CVE-2021-3712	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.fips.2.1~18.04.13.2
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	openssh@1:7.6p1-4ubuntu0.5	1:7.6p1-4ubuntu0.7+esm3
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-0ubuntu2	1:1.2.11.dfsg-0ubuntu2.2
High	UBUNTU-CVE-2021-3449	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.fips.2.1~18.04.9.1
High	UBUNTU-CVE-2024-28182	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
High	UBUNTU-CVE-2024-2511	nodejs@14.17.6-1nodesource1	no fix listed
High	UBUNTU-CVE-2024-2511	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.23+esm10
High	UBUNTU-CVE-2024-3596	krb5@1.16-2ubuntu0.2	1.16-2ubuntu0.4+esm3
High	UBUNTU-CVE-2026-21710	nodejs@14.17.6-1nodesource1	no fix listed
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1

Used by

1 chart

Chart	Version	Tag	Containers
code-servernicholaswildeVerified publisher	1.1.1	version-v3.11.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.