StackRadar

ghcr.io/linuxserver/code-server:version-v3.11.1 container image

GitHub Container Registry

Scanned 19 Sept 2026

Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/code-server

ghcr.io/linuxserver/code-server:version-v3.11.1 resolved to a385ba5cb161, scanned 19 Sept 2026: 988 findings, 18 critical, 2 on KEV; deployed by 1 chart, among them code-server.

Radar Score

16,3751843315612

988 findings on digest a385ba5cb161 · scanned 19 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
version-v3.11.1resolves toa385ba5cb1611 charttoday184331561216,375

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

612 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest a385ba5cb161 as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGO-2022-0435stdlib@go1.16.41.17.9
LowUBUNTU-CVE-2026-5773curl@7.58.0-2ubuntu3.147.58.0-2ubuntu3.24+esm10
LowUBUNTU-CVE-2023-5981gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm1
LowUBUNTU-CVE-2021-3997systemd@237-3ubuntu10.51no fix listed
LowGHSA-gmc2-2x9w-cgh9vm2@3.9.33.11.6
LowGHSA-pw2r-vq6v-hr8cfollow-redirects@1.14.31.14.8
LowGHSA-f5x3-32g6-xq36tar@6.1.116.2.1
LowGHSA-j8xg-fqg3-53r7word-wrap@1.2.31.2.4
LowGO-2022-0288stdlib@go1.16.41.16.12
LowUBUNTU-CVE-2024-33600glibc@2.27-3ubuntu1.42.27-3ubuntu1.6+esm3
LowUBUNTU-CVE-2026-66046expat@2.2.5-3ubuntu0.2no fix listed
LowUBUNTU-CVE-2022-48303tar@1.29b-2ubuntu0.21.29b-2ubuntu0.4
LowUBUNTU-CVE-2026-11972python2.7@2.7.17-1~18.04ubuntu1.6no fix listed
LowGO-2023-2102stdlib@go1.16.41.20.10
LowGHSA-qffp-2rhf-9h96tar@6.1.117.5.10
LowUBUNTU-CVE-2023-0466openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.22
LowUBUNTU-CVE-2023-0466openssl1.0@1.0.2n-1ubuntu5.71.0.2n-1ubuntu5.12
LowUBUNTU-CVE-2025-69534python2.7@2.7.17-1~18.04ubuntu1.6no fix listed
LowUBUNTU-CVE-2026-80230curl@7.58.0-2ubuntu3.14no fix listed
LowUBUNTU-CVE-2026-35385openssh@1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.7+esm5
LowUBUNTU-CVE-2022-23491ca-certificates@20210119~18.04.120211016ubuntu0.18.04.1
LowUBUNTU-CVE-2023-0465openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.22
LowUBUNTU-CVE-2023-0465openssl1.0@1.0.2n-1ubuntu5.71.0.2n-1ubuntu5.12
LowGHSA-23hp-3jrh-7fpwtar@6.1.117.5.19
LowUBUNTU-CVE-2025-69419nodejs@14.17.6-1nodesource1no fix listed
LowUBUNTU-CVE-2025-69419openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.23+esm7
LowUBUNTU-CVE-2026-21637nodejs@14.17.6-1nodesource1no fix listed
LowUBUNTU-CVE-2026-42013gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm4
LowUBUNTU-CVE-2018-7169shadow@1:4.5-1ubuntu21:4.5-1ubuntu2.2
LowGHSA-52cp-r559-cp3mjs-yaml@4.1.04.3.0
LowUBUNTU-CVE-2024-2236libgcrypt20@1.8.1-4ubuntu1.2no fix listed
LowGHSA-hmw2-7cc7-3qxxform-data@2.3.22.5.6
LowUBUNTU-CVE-2025-48060jq@1.5+dfsg-21.5+dfsg-2ubuntu0.1~esm1
LowGO-2021-0240stdlib@go1.16.41.15.13
LowUBUNTU-CVE-2026-54874openssl1.0@1.0.2n-1ubuntu5.71.0.2n-1ubuntu5.13+esm6
LowUBUNTU-CVE-2026-54874nodejs@14.17.6-1nodesource1no fix listed
LowUBUNTU-CVE-2026-54874openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.23+esm10
LowUBUNTU-CVE-2025-6020pam@1.1.8-3.6ubuntu2.18.04.3no fix listed
LowGHSA-7r86-cg39-jmmjminimatch@3.0.43.1.3
LowUBUNTU-CVE-2026-42766nodejs@14.17.6-1nodesource1no fix listed
LowUBUNTU-CVE-2026-42766openssl1.0@1.0.2n-1ubuntu5.71.0.2n-1ubuntu5.13+esm5
LowUBUNTU-CVE-2026-42766openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.23+esm9
LowGO-2021-0242stdlib@go1.16.41.15.13
LowUBUNTU-CVE-2025-32990gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm2
LowUBUNTU-CVE-2022-29187git@1:2.17.1-1ubuntu0.81:2.17.1-1ubuntu0.12
LowUBUNTU-CVE-2022-39253git@1:2.17.1-1ubuntu0.81:2.17.1-1ubuntu0.13
LowUBUNTU-CVE-2024-50602expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.9+esm2
LowUBUNTU-CVE-2018-20217krb5@1.16-2ubuntu0.21.16-2ubuntu0.3
LowUBUNTU-CVE-2026-56846nodejs@14.17.6-1nodesource1no fix listed
LowGHSA-8qq5-rm4j-mr97tar@6.1.117.5.3

Used by

1 chart
ChartVersionTagContainers
code-servernicholaswildeVerified publisher1.1.1version-v3.11.11

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 19 Sept 2026 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.