Fix CVE-2024-21538

Signed-off-by: Milton Moura <[email protected]>
nordeck · Dec 18, 2024 · 6e92bf4 · 6e92bf4
1 parent 38a84cb
commit 6e92bf4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/matrix-meetings-bot/Dockerfile b/matrix-meetings-bot/Dockerfile
@@ -9,6 +9,10 @@ RUN yarn install --production --frozen-lockfile --network-timeout 1000000
 FROM node:20-bookworm-slim
 ENV NODE_ENV=production
 WORKDIR /app
+
+#  update npm to address CVE-2024-21538
+RUN npm install -g [email protected]
+
 RUN set -x\
     && mkdir /app/storage \
     && chown -R 101:0 /app/storage \