Skip to content

Commit d91103f

Browse files
committed
fix: patch OpenSSL CVE-2024-6119 by updating to node:22-alpine
Update base image from pinned node:22.1.0-alpine to node:22-alpine to include OpenSSL 3.3.2+ which fixes CVE-2024-6119 (HIGH severity denial of service in libcrypto/libssl3). Ticket: WP-6406
1 parent 703369b commit d91103f

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

Dockerfile

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,8 @@
11
# syntax=docker/dockerfile:1.4
22

33
# Build stage
4-
FROM node:22.1.0-alpine@sha256:487dc5d5122d578e13f2231aa4ac0f63068becd921099c4c677c850df93bede8 AS builder
4+
# Using node:22-alpine with OpenSSL 3.3.2+ to address CVE-2024-6119
5+
FROM node:22-alpine AS builder
56

67
# Set build-time variables for reproducibility
78
ARG NODE_ENV=development
@@ -50,7 +51,8 @@ COPY . .
5051
# Build TypeScript code with deterministic output
5152
RUN npm run build
5253

53-
FROM node:22.1.0-alpine@sha256:487dc5d5122d578e13f2231aa4ac0f63068becd921099c4c677c850df93bede8 AS production
54+
# Using node:22-alpine with OpenSSL 3.3.2+ to address CVE-2024-6119
55+
FROM node:22-alpine AS production
5456

5557
# Declare build arguments in production stage
5658
ARG PORT=3081

0 commit comments

Comments
 (0)