diff --git a/backend/Dockerfile b/backend/Dockerfile index ed9df39..54be9dd 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -27,6 +27,9 @@ FROM node:20-alpine WORKDIR /app +# Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) +RUN apk upgrade --no-cache + # Install dumb-init for proper signal handling and postgresql-client for database checks RUN apk add --no-cache dumb-init postgresql-client diff --git a/backend/Dockerfile.dev b/backend/Dockerfile.dev index 5858c9a..8054bda 100644 --- a/backend/Dockerfile.dev +++ b/backend/Dockerfile.dev @@ -1,7 +1,10 @@ -FROM node:18-alpine +FROM node:20-alpine WORKDIR /app +# Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) +RUN apk upgrade --no-cache + # Install dumb-init for proper signal handling RUN apk add --no-cache dumb-init diff --git a/backend/package.json b/backend/package.json index 3764c82..abe8444 100644 --- a/backend/package.json +++ b/backend/package.json @@ -33,7 +33,7 @@ "i18next-browser-languagedetector": "^8.2.0", "i18next-http-backend": "^3.0.2", "joi": "^17.9.1", - "js-yaml": "^4.1.0", + "js-yaml": "^4.1.1", "jsonwebtoken": "^9.0.0", "knex": "^2.4.2", "mime-types": "^3.0.1", @@ -59,6 +59,9 @@ "overrides": { "prebuild-install": { "tar-fs": "2.1.4" - } + }, + "glob": "^11.1.0", + "body-parser": "^2.2.1", + "js-yaml": "^4.1.1" } } diff --git a/frontend/Dockerfile b/frontend/Dockerfile index aef876d..64697c3 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -30,6 +30,9 @@ RUN npm run build # Production stage FROM nginx:alpine +# Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) +RUN apk upgrade --no-cache + # Install runtime dependencies RUN apk add --no-cache curl diff --git a/frontend/Dockerfile.dev b/frontend/Dockerfile.dev index 4dfb1b8..c60a225 100644 --- a/frontend/Dockerfile.dev +++ b/frontend/Dockerfile.dev @@ -3,6 +3,9 @@ FROM node:20-alpine WORKDIR /app +# Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) +RUN apk upgrade --no-cache + # Copy package files COPY package*.json ./ diff --git a/frontend/Dockerfile.prod b/frontend/Dockerfile.prod index 2e0c6bb..9de2753 100644 --- a/frontend/Dockerfile.prod +++ b/frontend/Dockerfile.prod @@ -25,6 +25,9 @@ RUN npm run build # Production stage FROM nginx:alpine +# Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) +RUN apk upgrade --no-cache + # Install runtime dependencies RUN apk add --no-cache curl diff --git a/frontend/package.json b/frontend/package.json index b498c52..ae59434 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -65,5 +65,9 @@ }, "optionalDependencies": { "@rollup/rollup-linux-x64-gnu": "^4.45.1" + }, + "overrides": { + "glob": "^11.1.0", + "js-yaml": "^4.1.1" } }