Skip to content

fix: resolve critical vulnerabilities and upgrade Docker base image #1612

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DeepakNemad merged 3 commits into from
May 7, 2026
Merged

fix: resolve critical vulnerabilities and upgrade Docker base image #1612

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8a0c4d9
security: update axios to fix high severity vulnerabilities
DeepakNemad May 7, 2026
0c12bd1
fix: resolve critical vulnerabilities and upgrade Docker base image
DeepakNemad May 7, 2026
af81fd2
fix: resolve critical vulnerabilities and upgrade Docker base image
DeepakNemad May 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.agent-provisioning
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
# Install OpenSSL
RUN apk update && apk upgrade
RUN apk add --no-cache openssl
Expand Down Expand Up @@ -38,7 +38,7 @@ RUN ls -R /app/apps/agent-provisioning/AFJ/
RUN pnpm run build agent-provisioning

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
# Install OpenSSL
RUN apk update && apk upgrade
RUN apk add --no-cache openssl
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.agent-service
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache \
openssl \
openssh-client \
Expand All @@ -18,7 +18,7 @@ RUN pnpm run build agent-service
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache \
openssl \
openssh-client \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.api-gateway
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build api-gateway
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.cloud-wallet
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build cloud-wallet
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.connection
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build connection
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.ecosystem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build ecosystem
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.geolocation
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build geo-location
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.issuance
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build issuance
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.ledger
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build ledger
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.notification
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl && rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app
Expand All @@ -12,7 +12,7 @@ RUN pnpm run build notification
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.oid4vc-issuance
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl && rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app
Expand All @@ -12,7 +12,7 @@ RUN pnpm run build oid4vc-issuance
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.oid4vc-verification
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build oid4vc-verification
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.organization
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build organization
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
2 changes: 1 addition & 1 deletion Dockerfiles/Dockerfile.seed
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache \
postgresql-client \
openssl \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.user
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build user
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.utility
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build utility
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.verification
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build verification
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.webhook
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build webhook
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
4 changes: 2 additions & 2 deletions Dockerfiles/Dockerfile.x509
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Stage 1: Build the application
FROM node:24-alpine3.21 AS build
FROM node:24-alpine3.23 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
Expand All @@ -13,7 +13,7 @@ RUN pnpm run build x509
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:24-alpine3.21
FROM node:24-alpine3.23
RUN apk update && apk upgrade && apk add --no-cache openssl \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
Expand Down
21 changes: 12 additions & 9 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,8 +63,8 @@
"async-retry": "^1.3.3",
"auth0-js": "^9.30.1",
"aws-sdk": "^2.1693.0",
"axios": "^1.13.5",
"bcrypt": "^5.1.1",
"axios": "^1.16.0",
"bcrypt": "^6.0.0",
"blob-stream": "^0.1.3",
"body-parser": "^1.20.4",
"buffer": "^6.0.3",
Expand All @@ -77,12 +77,12 @@
"crypto-js": "^4.2.0",
"crypto-random-string": "^5.0.0",
"dotenv": "^16.6.1",
"express": "^4.22.1",
"express": "^5.2.1",
"express-useragent": "^1.0.15",
"firebase-admin": "^13.6.1",
"fs": "0.0.1-security",
"generate-password": "^1.7.1",
"helmet": "^7.2.0",
"helmet": "^8.1.0",
"html-pdf": "^3.0.1",
"html-to-image": "^1.11.13",
"json2csv": "^5.0.7",
Expand Down Expand Up @@ -120,14 +120,17 @@
"socket.io-client": "^4.8.3",
"swagger-ui-express": "^5.0.1",
"typeorm": "^0.3.28",
"unzipper": "^0.10.14",
"unzipper": "^0.12.3",
"uuid": "^9.0.1",
"validator": "^13.15.26",
"validator": "^13.15.35",
"web-push": "^3.6.7",
"winston": "~3.4.0",
"winston": "^3.19.0",
"winston-daily-rotate-file": "^5.0.0",
"winston-elasticsearch": "0.16.0",
"xml-js": "^1.6.11"
"xml-js": "^1.6.11",
"protobufjs": "^7.5.6",
"handlebars": "^4.7.9",
"form-data": "^4.0.5"
},
"devDependencies": {
"@nestjs/cli": "catalog:",
Expand All @@ -154,7 +157,7 @@
"lint-staged": "^13.3.0",
"prettier": "^3.8.1",
"prisma": "^5.22.0",
"supertest": "^6.3.4",
"supertest": "^7.2.2",
"ts-jest": "^29.4.6",
"ts-loader": "^9.5.4",
"ts-node": "^10.9.2",
Expand Down
Loading
Loading