CI Report:
https://ci-tests.linuxserver.io/linuxserver/code-server/4.141.1-ls372/index.html
LinuxServer Changes:
Full Changelog: 4.141.0-ls371...4.141.1-ls372
Remote Changes:
Security
- Update bundled Node.js to 24.22.1 to fix a remote code execution bug in the
Brotli decoder (CVE-2026-111497). - Reject compressed request bodies (
Content-Encoding: br,gzip, or
deflate) instead of decompressing them.
Fixed
- Boolean flags in the
--flag=falseform and in the config file now respect
being set to false.
Added
- Turkish locale.
Changed
- Expand values from path options in the config file that start with a tilde.