File tree Expand file tree Collapse file tree 1 file changed +5
-4
lines changed
Expand file tree Collapse file tree 1 file changed +5
-4
lines changed Original file line number Diff line number Diff line change 11# Setup Node
2- FROM node:22-alpine3.23 AS base
2+ FROM node:24-alpine3.22 AS base
3+ # Refresh index and upgrade OpenSSL so all stages get patched version (fixes CVE-2025-15467, CVE-2025-4575).
4+ # apk update is required so the build sees the latest openssl/libssl3; both packages must be upgraded.
5+ RUN apk update && apk upgrade openssl libssl3
36
47# # Upgrade npm (pin version for reproducibility; use npm@latest if you prefer)
58# RUN npm install -g npm@latest \
@@ -9,9 +12,7 @@ FROM node:22-alpine3.23 AS base
912# Install dependencies
1013FROM base AS deps
1114# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
12- RUN apk upgrade && apk --no-cache add git
13- # Update OpenSSL to fix CVE-2025-4575
14- RUN apk upgrade openssl
15+ RUN apk --no-cache add git
1516RUN apk add --no-cache libc6-compat
1617WORKDIR /app
1718COPY package*.json ./
You can’t perform that action at this time.
0 commit comments