The production Dockerfile already runs apk upgrade at build time. The helper and realtime Dockerfiles were missing this step. The helper (Alpine 3.21) ships with CVE-2025-15467 in OpenSSL 3.3.5. The realtime (Alpine 3.18) has outdated OpenSSL 3.1.2 with HIGH CVEs. Adding apk upgrade before apk add makes both images consistent with the production Dockerfile. |
||
|---|---|---|
| .. | ||
| Dockerfile | ||
| package-lock.json | ||
| package.json | ||
| soketi-entrypoint.sh | ||
| terminal-server.js | ||
| terminal-utils.js | ||
| terminal-utils.test.js | ||