Skip to content

Commit 5033742

Browse files
committed
fix: update npm to latest version to patch CVE-2024-21538 and CVE-2025-5889
1 parent dc27da6 commit 5033742

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
FROM node:20 AS frontend-builder
22
WORKDIR /app
33

4+
RUN npm install -g npm@latest
5+
46
COPY package*.json ./
57
COPY client/package*.json ./client/
68
COPY server/package*.json ./server/
@@ -13,6 +15,8 @@ RUN npm run build -w client
1315
FROM node:20 AS backend-builder
1416
WORKDIR /app
1517

18+
RUN npm install -g npm@latest
19+
1620
COPY package*.json ./
1721
COPY server/package*.json ./server/
1822

@@ -22,6 +26,8 @@ COPY server/ ./server/
2226
FROM node:20-slim
2327
WORKDIR /app
2428

29+
RUN npm install -g npm@latest
30+
2531
COPY --from=frontend-builder /app/client/dist ./dist
2632

2733
COPY --from=backend-builder /app/server ./server

0 commit comments

Comments
 (0)