You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
and their respective Dockerfiles use the image node:18-alpine. The image has a known vulnerability (CVE-2024-21538) (ref 1, 2)
Is there any context that might help us understand?
It might be a good time to update the Docker examples to use a more recent version of the image, such as node:22-alpine (link) or the LTS tag node:lts-alpine (link), which both do not have this vulnerability.
If this change is deemed useful, I'd be happy to open a Pull Request to update the relevant Dockerfiles.
Does the docs page already exist? Please link to it.
What is the documentation issue?
Related to the documentation of self-hosting with Docker (the issue template specifically designed for examples did not work).
Problem
I noticed that all three Docker examples
with-docker
(1)with-docker-compose
(1, 2, 3)with-docker-multi-env
(1, 2, 3)and their respective Dockerfiles use the image
node:18-alpine
. The image has a known vulnerability (CVE-2024-21538) (ref 1, 2)Is there any context that might help us understand?
It might be a good time to update the Docker examples to use a more recent version of the image, such as
node:22-alpine
(link) or the LTS tagnode:lts-alpine
(link), which both do not have this vulnerability.If this change is deemed useful, I'd be happy to open a Pull Request to update the relevant Dockerfiles.
Does the docs page already exist? Please link to it.
https://nextjs.org/docs/app/guides/self-hosting#docker-image
The text was updated successfully, but these errors were encountered: