deep-dream-maker icon indicating copy to clipboard operation
deep-dream-maker copied to clipboard

[Snyk] Security upgrade nginx from alpine to 1.25.4-alpine3.18

Open OverStruck opened this issue 11 months ago • 1 comments

This PR was automatically created by Snyk using the credentials of a real user.


Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

  • webapp/Dockerfile.prod

We recommend upgrading to nginx:1.25.4-alpine3.18, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity Priority Score / 1000 Issue Exploit Maturity
low severity 436 CVE-2024-28757
SNYK-ALPINE318-EXPAT-6446356
No Known Exploit

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

OverStruck avatar Mar 17 '24 20:03 OverStruck

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 79.71%. Comparing base (8cf68d8) to head (a48afda).

Additional details and impacted files
@@           Coverage Diff            @@
##           dev-2.0     #102   +/-   ##
========================================
  Coverage    79.71%   79.71%           
========================================
  Files           18       18           
  Lines          276      276           
========================================
  Hits           220      220           
  Misses          56       56           

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

codecov[bot] avatar Mar 17 '24 20:03 codecov[bot]