ben.carrasco/jambonz-webapp
1
0
Fork 0
mirror of https://github.com/jambonz/jambonz-webapp.git synced 2026-01-25 02:08:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Upgrade legacy app with new node image (#207)

Browse Source 
This PR upgrades node base image to node:18.14.0-alpine3.16

This fixes:
Critical vulnerability:
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

High vulnerability:
CWE-416: Double Free
CWE-416: Use After Free
This commit is contained in:
EgleH
2023-02-21 14:26:12 +01:00
committed by GitHub
parent 06f826c6da
commit a75ea8fe5c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Dockerfile
View File

@@ -1,4 +1,4 @@
FROM --platform=linux/amd64 node:18.12.1-alpine3.16 as base
FROM --platform=linux/amd64 node:18.14.0-alpine3.16 as base
RUN apk --update --no-cache add --virtual .builds-deps build-base curl python3
@@ -20,4 +20,4 @@ COPY --from=build /opt/app /opt/app/
RUN chmod +x /opt/app/entrypoint.sh
ENTRYPOINT ["/opt/app/entrypoint.sh"]
ENTRYPOINT ["/opt/app/entrypoint.sh"]