Node-red image has security vulnerabilities about node-red-docker HOT 7 CLOSED

They come from the alpine base container, not something we have any influence over.

from node-red-docker.

I've kicked off a respin of the 3.1.9 containers, they will pick up the latest NodeJS Alpine base contianers.

from node-red-docker.

@hardillb thanks for the response.
We're using v3.1.9-18-minimal where "18" probably means Node version 18, right?
But what exact version of Node do you use as a base for Node-red? I mean maybe it's possible to use this one - https://github.com/nodejs/docker-node/tree/main/18/alpine3.19 (Node 18 + alpine v3.19)?
This latest stable Alpine version solved all security tickets in our images.

from node-red-docker.

The builds have been respun

from node-red-docker.

The builds have been respun

could this affect the node-red-dashboard dependency?

from node-red-docker.

Unlikely, that looks like a problem with permissions on a volume mounted on /data

from node-red-docker.

@hardillb probably some temp issue, works well now. Thanks a lot!

from node-red-docker.