From a448293c6137579e795264c5e37687b4985dac86 Mon Sep 17 00:00:00 2001 From: Gavin <62725108+Greenlio@users.noreply.github.com> Date: Tue, 25 Jul 2023 03:58:10 -0500 Subject: [PATCH] CVE-2022-2309 fixes old node version which is vulnerable to https://www.cve.org/CVERecord?id=CVE-2022-2309 Introduced through: node@18 -> libxml2@2.9.14+dfsg-1.2 Fix: Upgrade to libxml2@2.9.14+dfsg-1.3~deb12u1 <- node:20.4-bookworm-slim --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e657716..8bab312 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:18 +FROM node:20.4-bookworm-slim WORKDIR /usr/src/app COPY . . RUN npm install