mirror of
https://github.com/stablyai/orca.git
synced 2026-11-13 17:37:40 +00:00
The runtime stages shipped node:24.22.1-alpine (Alpine 3.24.2) as built, so CVE-2026-85091 (zlib) and CVE-2026-107891 (musl) were present in all three images. Move to node:24.22.2-alpine (Alpine 3.24.3) and apk upgrade the runtime stage, as the api and auth images already do, so later Alpine fixes land at build time.
2 lines
8 B
Plaintext
2 lines
8 B
Plaintext
24.22.2
|