From 4f864fe17680d27095c3e630c121183ba3214890 Mon Sep 17 00:00:00 2001 From: samin rahman Date: Mon, 9 Nov 2026 13:31:57 +1100 Subject: [PATCH 1/2] UID2-8276, UID2-8277: upgrade node base image to 24.22.2-alpine3.24 Updates the node base image from 24.21.0-alpine3.24 to 24.22.2-alpine3.24 in the sample Dockerfiles, for CVE-2026-107891 and CVE-2026-85091. Co-Authored-By: Claude Sonnet 5.5 --- .../google-secure-signals/client-server/Dockerfile | 2 +- .../google-secure-signals/react-client-side/Dockerfile | 4 ++-- web-integrations/google-secure-signals/server-side/Dockerfile | 2 +- web-integrations/javascript-sdk/client-server/Dockerfile | 2 +- web-integrations/javascript-sdk/react-client-side/Dockerfile | 4 ++-- web-integrations/prebid-integrations/client-server/Dockerfile | 2 +- web-integrations/server-side/Dockerfile | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/web-integrations/google-secure-signals/client-server/Dockerfile b/web-integrations/google-secure-signals/client-server/Dockerfile index 1244c5e..af08351 100644 --- a/web-integrations/google-secure-signals/client-server/Dockerfile +++ b/web-integrations/google-secure-signals/client-server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 +FROM node:24.22.2-alpine3.24 WORKDIR /usr/src/app diff --git a/web-integrations/google-secure-signals/react-client-side/Dockerfile b/web-integrations/google-secure-signals/react-client-side/Dockerfile index 020ec18..4878ef0 100644 --- a/web-integrations/google-secure-signals/react-client-side/Dockerfile +++ b/web-integrations/google-secure-signals/react-client-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 AS builder +FROM node:24.22.2-alpine3.24 AS builder WORKDIR /usr/src/app @@ -10,7 +10,7 @@ COPY public ./public RUN npm run build -FROM node:24.21.0-alpine3.24 AS runtime +FROM node:24.22.2-alpine3.24 AS runtime WORKDIR /usr/src/app diff --git a/web-integrations/google-secure-signals/server-side/Dockerfile b/web-integrations/google-secure-signals/server-side/Dockerfile index a2a51f1..d6f342c 100644 --- a/web-integrations/google-secure-signals/server-side/Dockerfile +++ b/web-integrations/google-secure-signals/server-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 +FROM node:24.22.2-alpine3.24 WORKDIR /usr/src/app diff --git a/web-integrations/javascript-sdk/client-server/Dockerfile b/web-integrations/javascript-sdk/client-server/Dockerfile index 8dd082a..cdcd8cd 100644 --- a/web-integrations/javascript-sdk/client-server/Dockerfile +++ b/web-integrations/javascript-sdk/client-server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 +FROM node:24.22.2-alpine3.24 WORKDIR /usr/src/app diff --git a/web-integrations/javascript-sdk/react-client-side/Dockerfile b/web-integrations/javascript-sdk/react-client-side/Dockerfile index 6a35e67..ab1e5da 100644 --- a/web-integrations/javascript-sdk/react-client-side/Dockerfile +++ b/web-integrations/javascript-sdk/react-client-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 AS builder +FROM node:24.22.2-alpine3.24 AS builder WORKDIR /usr/src/app @@ -10,7 +10,7 @@ COPY public ./public RUN npm run build -FROM node:24.21.0-alpine3.24 AS runtime +FROM node:24.22.2-alpine3.24 AS runtime WORKDIR /usr/src/app diff --git a/web-integrations/prebid-integrations/client-server/Dockerfile b/web-integrations/prebid-integrations/client-server/Dockerfile index fce985d..7da5554 100644 --- a/web-integrations/prebid-integrations/client-server/Dockerfile +++ b/web-integrations/prebid-integrations/client-server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 +FROM node:24.22.2-alpine3.24 WORKDIR /usr/src/app diff --git a/web-integrations/server-side/Dockerfile b/web-integrations/server-side/Dockerfile index cffec1b..455194f 100644 --- a/web-integrations/server-side/Dockerfile +++ b/web-integrations/server-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.21.0-alpine3.24 +FROM node:24.22.2-alpine3.24 WORKDIR /usr/src/app From 5833e9be4d3a94873e7c9d862ef952318414acd8 Mon Sep 17 00:00:00 2001 From: samin rahman Date: Mon, 9 Nov 2026 13:38:31 +1100 Subject: [PATCH 2/2] UID2-8276, UID2-8277: pin node base image by digest Pins node:24.22.2-alpine3.24 to its multi-arch index digest in the sample Dockerfiles so builds are reproducible. The tag is kept for readability. Co-Authored-By: Claude Sonnet 5.5 --- .../google-secure-signals/client-server/Dockerfile | 2 +- .../google-secure-signals/react-client-side/Dockerfile | 4 ++-- web-integrations/google-secure-signals/server-side/Dockerfile | 2 +- web-integrations/javascript-sdk/client-server/Dockerfile | 2 +- web-integrations/javascript-sdk/react-client-side/Dockerfile | 4 ++-- web-integrations/prebid-integrations/client-server/Dockerfile | 2 +- web-integrations/server-side/Dockerfile | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/web-integrations/google-secure-signals/client-server/Dockerfile b/web-integrations/google-secure-signals/client-server/Dockerfile index af08351..24f8b84 100644 --- a/web-integrations/google-secure-signals/client-server/Dockerfile +++ b/web-integrations/google-secure-signals/client-server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 WORKDIR /usr/src/app diff --git a/web-integrations/google-secure-signals/react-client-side/Dockerfile b/web-integrations/google-secure-signals/react-client-side/Dockerfile index 4878ef0..ae62082 100644 --- a/web-integrations/google-secure-signals/react-client-side/Dockerfile +++ b/web-integrations/google-secure-signals/react-client-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 AS builder +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 AS builder WORKDIR /usr/src/app @@ -10,7 +10,7 @@ COPY public ./public RUN npm run build -FROM node:24.22.2-alpine3.24 AS runtime +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 AS runtime WORKDIR /usr/src/app diff --git a/web-integrations/google-secure-signals/server-side/Dockerfile b/web-integrations/google-secure-signals/server-side/Dockerfile index d6f342c..07a0120 100644 --- a/web-integrations/google-secure-signals/server-side/Dockerfile +++ b/web-integrations/google-secure-signals/server-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 WORKDIR /usr/src/app diff --git a/web-integrations/javascript-sdk/client-server/Dockerfile b/web-integrations/javascript-sdk/client-server/Dockerfile index cdcd8cd..bc954ea 100644 --- a/web-integrations/javascript-sdk/client-server/Dockerfile +++ b/web-integrations/javascript-sdk/client-server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 WORKDIR /usr/src/app diff --git a/web-integrations/javascript-sdk/react-client-side/Dockerfile b/web-integrations/javascript-sdk/react-client-side/Dockerfile index ab1e5da..fd331e4 100644 --- a/web-integrations/javascript-sdk/react-client-side/Dockerfile +++ b/web-integrations/javascript-sdk/react-client-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 AS builder +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 AS builder WORKDIR /usr/src/app @@ -10,7 +10,7 @@ COPY public ./public RUN npm run build -FROM node:24.22.2-alpine3.24 AS runtime +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 AS runtime WORKDIR /usr/src/app diff --git a/web-integrations/prebid-integrations/client-server/Dockerfile b/web-integrations/prebid-integrations/client-server/Dockerfile index 7da5554..f488ed4 100644 --- a/web-integrations/prebid-integrations/client-server/Dockerfile +++ b/web-integrations/prebid-integrations/client-server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 WORKDIR /usr/src/app diff --git a/web-integrations/server-side/Dockerfile b/web-integrations/server-side/Dockerfile index 455194f..c37298b 100644 --- a/web-integrations/server-side/Dockerfile +++ b/web-integrations/server-side/Dockerfile @@ -1,4 +1,4 @@ -FROM node:24.22.2-alpine3.24 +FROM node:24.22.2-alpine3.24@sha256:a34ab6d7f6f4813f4d0c5469d74685604b962fbdbf5793a7bc7b4998ecb867c8 WORKDIR /usr/src/app