Skip to content

Commit 99617c4

Browse files
CVE-2024-21538 fix cross-spawn vulnerability6
1 parent 68a46fd commit 99617c4

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

Dockerfile

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,11 @@ RUN $APT_UPDATE && $APT_INSTALL \
2727
unzip software-properties-common apt-transport-https \
2828
openjdk-11-jdk xvfb siege apache2-utils git make nodejs locales tsung libtool libssl-dev libyaml-dev libxml2-dev libxslt-dev
2929

30+
# Verify Node.js and npm installation
31+
RUN node -v && npm -v || ($APT_UPDATE && $APT_INSTALL npm)
32+
33+
# Install cross-spawn@7.0.5 to fix the CVE-2024-21538 issue
34+
RUN npm uninstall -g cross-spawn && npm install -g cross-spawn@7.0.5
3035

3136
# Install .NET sdk
3237
# check this page for the links and hash

0 commit comments

Comments
 (0)