chore(docker): pin npm to 11.12.1
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
parent
19c59a2fb3
commit
e056e5c006
1 changed files with 1 additions and 1 deletions
|
|
@ -2,7 +2,7 @@ FROM node:20-alpine
|
|||
|
||||
# Upgrade npm to pull in patched bundled deps (cross-spawn, glob, minimatch, tar)
|
||||
# CVEs: CVE-2024-21538, CVE-2025-64756, CVE-2026-26996/27903/27904, CVE-2026-23745/23950/24842/26960/29786/31802
|
||||
RUN npm install -g npm@latest
|
||||
RUN npm install -g npm@11.12.1
|
||||
|
||||
# Install runtime dependencies
|
||||
RUN apk add --no-cache \
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue