Skip to content

Commit 3325e48

Browse files
fix(security): update pcre2 library to at least 10.46-r0
1 parent 0854ccb commit 3325e48

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

Dockerfile

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@ FROM node:20-alpine3.22 as build-stage
22
WORKDIR /usr/src/app
33
ARG DOCKER_TAG="latest"
44

5+
# updates pcre2 library to fix CVE-2025-58050 in alpine base image by updating it to at least 10.46-r0
6+
RUN apk update && apk upgrade pcre2>=10.46
7+
58
RUN --mount=type=secret,id=env_vars \
69
cp /run/secrets/env_vars .env
710

@@ -25,6 +28,10 @@ RUN echo "{ \"version\": \"${DOCKER_TAG}\" }" > ./src/common/constants/release.j
2528
RUN yarn build
2629

2730
FROM nginx:alpine3.22
31+
32+
# updates pcre2 library to fix CVE-2025-58050 in alpine base image by updating it to at least 10.46-r0
33+
RUN apk update && apk upgrade pcre2>=10.46
34+
2835
ENV NGINX_USER=svc_nginx_hmda
2936
RUN apk update && apk upgrade
3037
RUN rm -rf /etc/nginx/conf.d

0 commit comments

Comments
 (0)