Commit 8e7fdf4
committed
fix: update npm in Docker image to fix cross-spawn vulnerability
Updates npm to latest version in the Docker image to fix
CVE-2024-21538 (cross-spawn regular expression denial of service).
The vulnerability exists in npm's dependencies in the base Node.js
image. Updating npm to latest version includes the fixed version
of cross-spawn (7.0.5+).
Severity: HIGH
Fixed in: cross-spawn 7.0.51 parent aa2c005 commit 8e7fdf4
1 file changed
Lines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
5 | 8 | | |
6 | 9 | | |
7 | 10 | | |
| |||
0 commit comments