CVE-2024-28863 - Githubissues

nodejs / docker-node

Official Docker Image for Node.js :whale: :turtle: :rocket:

https://hub.docker.com/_/node/

MIT License

8.13k stars 1.95k forks source link

CVE-2024-28863 #2068

Closed Mayvis closed 2 months ago

Mayvis commented 2 months ago

There has an CVE issue. Maybe update tar@6.2.0 to tar@6.2.1?

https://hub.docker.com/layers/library/node/lts-alpine3.18/images/sha256-5cfa23de5d7e5e6226dea49eab15fdf4e53fde84b8feccbce97aa27695242bb9?context=explore

nschonni commented 2 months ago

https://github.com/nodejs/docker-node/blob/main/SECURITY.md