diff --git a/Dockerfile b/Dockerfile index 702ddea..7b9257c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -6,11 +6,11 @@ ENV NODE_ENV production # Upgrade npm to latest version to address CVE-2026-0775 (npm 11.8.0 vulnerability) RUN npm install -g npm@latest -# Update tar to 7.5.7 to fix CVE in npm's bundled tar (7.5.4) +# Update tar to 7.5.8 to fix CVE in npm's bundled tar (7.5.4) RUN mkdir -p /tmp/tar-update && \ cd /tmp/tar-update && \ npm init -y && \ - npm install tar@7.5.7 --legacy-peer-deps && \ + npm install tar@7.5.8 --legacy-peer-deps && \ rm -rf /usr/local/lib/node_modules/npm/node_modules/tar && \ cp -r node_modules/tar /usr/local/lib/node_modules/npm/node_modules/ && \ rm -rf /tmp/tar-update