search

alpinelinux / docker-alpine

Official Alpine Linux Docker image. Win at minimalism!
MIT License
1.08k stars 262 forks source link

Vulnerability CVE-2024-28863 in node:alpine #386

Closed Mayvis closed 5 months ago

Mayvis commented 5 months ago

There has an CVE issue in node lts version alpine. Maybe update tar@6.2.0 to tar@6.2.1?

https://hub.docker.com/layers/library/node/lts-alpine3.18/images/sha256-5cfa23de5d7e5e6226dea49eab15fdf4e53fde84b8feccbce97aa27695242bb9?context=explore

Mayvis commented 5 months ago

I just RUN npm install -g npm@10.5.1 to fix this problem.