titaniumnet-mirror/Nebula
1
0
Fork 0
mirror of https://github.com/NebulaServices/Nebula.git synced 2025-05-17 13:30:00 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

CVE-2022-2309

Browse source 
fixes old node version which is vulnerable to https://www.cve.org/CVERecord?id=CVE-2022-2309

Introduced through: node@18 -> libxml2@2.9.14+dfsg-1.2
Fix: Upgrade to libxml2@2.9.14+dfsg-1.3~deb12u1 <- node:20.4-bookworm-slim
This commit is contained in:
Gavin 2023-07-25 03:58:10 -05:00 • committed by GitHub
parent 1866eec91a
commit a448293c61
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Dockerfile
View file

@ -1,4 +1,4 @@
FROM node:18
FROM node:20.4-bookworm-slim
WORKDIR /usr/src/app
COPY . .
RUN npm install