From 929af7304d3d1d23aa4f840887c6d0e2a85922d1 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 14 Jan 2026 12:31:01 +0000 Subject: [PATCH] fix: upgrade Node.js to 22.22.0 for DoS vulnerability Addresses the async hooks stack space exhaustion vulnerability documented at nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks This is a security release that fixes a denial-of-service issue affecting React, Next.js, and APM users. --- .github/workflows/docker-build-push.yml | 2 +- Dockerfile | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml index 91c8425..852d881 100644 --- a/.github/workflows/docker-build-push.yml +++ b/.github/workflows/docker-build-push.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest env: - IMAGE_VERSION: bookworm_rust_1.88-node_22.17.1 + IMAGE_VERSION: bookworm_rust_1.88-node_22.22.0 steps: - name: Checkout code diff --git a/Dockerfile b/Dockerfile index 31817ef..57b99eb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,12 +45,13 @@ RUN ((cat /etc/os-release | grep ID | grep alpine) && apk add --no-cache musl-de && rm -rf $CARGO_HOME/registry/ # ---------------------- -# node 22.17.1 via https://github.com/nodejs/docker-node/blob/main/22/bookworm/Dockerfile +# node 22.22.0 via https://github.com/nodejs/docker-node/blob/main/22/bookworm/Dockerfile +# security fix: https://nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks # ---------------------- RUN groupadd --gid 1000 node \ && useradd --uid 1000 --gid node --shell /bin/bash --create-home node -ENV NODE_VERSION 22.17.1 +ENV NODE_VERSION 22.22.0 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \ && case "${dpkgArch##*-}" in \