Code-Server Base-image having vulnerable submodules. How to upgrade them to a non-vulnerable submodule.

[Laknarayan]

Hello,

We have a internal scan on vulnerability and we see around 200 vulnerabilities reported with current latest version of codeserver. Also the node version v20.18.1 is having critical vulnerabilities. Kindly help us here with a solution. Thanks

[code-asher]

Next update will use 20.18.2. I am also working on updating path-to-regexp. I am not aware of any others though.

[Laknarayan]

even v20.18.2 is having 9 high 1 critical and 117 low vulnerability

[code-asher]

We are using 20.18.3 now. All we can do is follow the version VS Code is using.