From dd134781ea63f0de91833f4e9c3c149fb4c760ed Mon Sep 17 00:00:00 2001 From: aldousalvarez Date: Fri, 26 Jan 2024 18:02:39 +0800 Subject: [PATCH] tools(connector-besu): address CVEs: CVE-2022-21190, CVE-2023-36665, CVE-2022-2421 Fixes #2745 Primary Changes ---------------- 1. Updated the version of the base image that is used in the Dockerfile Signed-off-by: aldousalvarez --- packages/cactus-plugin-ledger-connector-besu/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cactus-plugin-ledger-connector-besu/Dockerfile b/packages/cactus-plugin-ledger-connector-besu/Dockerfile index 7441514ba97..0b64f05b970 100644 --- a/packages/cactus-plugin-ledger-connector-besu/Dockerfile +++ b/packages/cactus-plugin-ledger-connector-besu/Dockerfile @@ -1,4 +1,4 @@ -FROM ghcr.io/hyperledger/cactus-cmd-api-server:2022-08-05-7309f2a +FROM ghcr.io/hyperledger/cactus-cmd-api-server:2024-01-24-dd85b12 RUN npm install -g yarn@1.22.17 ENV NODE_ENV=production