ghcr.io/linuxserver/code-server:version-v3.11.1 container image
GitHub Container RegistryScanned 19 Sept 2026
Deployed by 1 of 17,805 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/linuxserver/code-server
ghcr.io/linuxserver/code-server:version-v3.11.1 resolved to a385ba5cb161, scanned 19 Sept 2026: 988 findings, 18 critical, 2 on KEV; deployed by 1 chart, among them code-server.
Radar Score
988 findings on digest a385ba5cb161 · scanned 19 Sept 2026
KEV ×2 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest a385ba5cb161 as scanned on 19 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 19 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | UBUNTU-CVE-2024-45491 | expat | 2.2.5-3ubuntu0.9+esm1 |
| Medium | GHSA-p782-xgp4-8hr8 | golang.org/ | 0.0.0-20220412211240-33da011f77ad |
| Medium | UBUNTU-CVE-2020-23026 | gcc-8 | no fix listed |
| Medium | UBUNTU-CVE-2023-29491 | ncurses | 6.1-1ubuntu1.18.04.1 |
| Medium | UBUNTU-CVE-2026-34180 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm9 |
| Medium | UBUNTU-CVE-2026-34180 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm5 |
| Medium | UBUNTU-CVE-2026-34180 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-7383 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm5 |
| Medium | UBUNTU-CVE-2026-7383 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-7383 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm9 |
| Medium | GHSA-m5w8-4gq2-6f8x | vm2 | 3.11.6 |
| Medium | UBUNTU-CVE-2025-69720 | ncurses | 6.1-1ubuntu1.18.04.1+esm3 |
| Medium | UBUNTU-CVE-2024-33601 | glibc | 2.27-3ubuntu1.6+esm3 |
| Medium | UBUNTU-CVE-2026-8376 | perl | 5.26.1-6ubuntu0.7+esm2 |
| Medium | UBUNTU-CVE-2026-14457 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2025-9232 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Medium | UBUNTU-CVE-2024-32487 | less | 487-0.1ubuntu0.1~esm2 |
| Medium | UBUNTU-CVE-2024-32465 | git | 1:2.17.1-1ubuntu0.18+esm1 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | UBUNTU-CVE-2023-4813 | glibc | 2.27-3ubuntu1.6+esm1 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | UBUNTU-CVE-2025-0938 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm11 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-m4wx-m65x-ghrr | vm2 | 3.11.4 |
| Medium | GHSA-8cj5-5rvv-wf4v | tar-fs | 2.1.3 |
| Medium | UBUNTU-CVE-2020-16156 | perl | 5.26.1-6ubuntu0.6 |
| Medium | UBUNTU-CVE-2025-69421 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm3 |
| Medium | UBUNTU-CVE-2025-69421 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2025-69421 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm7 |
| Medium | UBUNTU-CVE-2026-8927 | curl | 7.58.0-2ubuntu3.24+esm9 |
| Medium | UBUNTU-CVE-2022-3116 | heimdal | 7.5.0+dfsg-1ubuntu0.1 |
| Medium | UBUNTU-CVE-2023-27043 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm13 |
| Medium | UBUNTU-CVE-2026-9669 | python2.7 | no fix listed |
| Medium | UBUNTU-CVE-2026-28388 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 |
| Medium | UBUNTU-CVE-2026-28388 | openssl1.0 | 1.0.2n-1ubuntu5.13+esm4 |
| Medium | UBUNTU-CVE-2026-28388 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2023-28321 | curl | 7.58.0-2ubuntu3.24+esm1 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-m283-3h24-438v | vm2 | 3.11.6 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-vj76-c3g6-qr5v | tar-fs | 2.1.4 |
| Medium | UBUNTU-CVE-2017-18207 | python2.7 | no fix listed |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | UBUNTU-CVE-2024-22025 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-28387 | nodejs | no fix listed |
| Medium | UBUNTU-CVE-2026-28387 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 |
| Medium | UBUNTU-CVE-2026-11940 | python2.7 | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| code-servernicholaswildeVerified publisher | 1.1.1 | version-v3.11.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.