Skip to content

UID2-8276, UID2-8277: upgrade node base image to 24.22.2-alpine3.24 (CVE-2026-107891, CVE-2026-85091) - #243

Merged
samin-ttd merged 2 commits into
mainfrom
sra-UID2-8276-bump-node-base-image
Nov 9, 2026
Merged

samin-ttd merged 2 commits into
mainfrom
sra-UID2-8276-bump-node-base-image

Conversation

@samin-ttd

@samin-ttd samin-ttd commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Upgrades the node base image 24.21.0-alpine3.24 → 24.22.2-alpine3.24 in the sample Dockerfiles, for CVE-2026-107891 and CVE-2026-85091, and pins it by digest.

The assessment is recorded on the tickets in the title.

🤖 Generated with Claude Code

samin-ttd and others added 2 commits November 9, 2026 13:31
Updates the node base image from 24.21.0-alpine3.24 to 24.22.2-alpine3.24
in the sample Dockerfiles, for CVE-2026-107891 and CVE-2026-85091.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Pins node:24.22.2-alpine3.24 to its multi-arch index digest in the sample
Dockerfiles so builds are reproducible. The tag is kept for readability.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@samin-ttd
samin-ttd merged commit 16b1134 into main Nov 9, 2026
4 checks passed
@samin-ttd
samin-ttd deleted the sra-UID2-8276-bump-node-base-image branch November 9, 2026 03:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants