swagger-api / swagger-api/swagger-ui
Upgrade nginx base image in DockerFile
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 29k
- Forks
- 9.3k
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 25
Description
The nginx base image version 1.27.0-alpine has some critical vulnerabilities, so please upgrade the base image of nginx in the DockerFile and upgrade the docker image version of the swagger-ui
The vulnerabilities using the v5.17.14 is mentioned in the screenshot
These vulnerabilities are mainly in the nginx 1.27.0-alpine docker image like this
The nginx 1.27.0-alpine doesn't have much vulnerabilities
So please upgrade the nginx docker image to 1.27.0-alpine
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the repository's Dockerfile and checking the current nginx and swagger-ui image versions against the issue text and vulnerability screenshots. Resolve the contradictory nginx target and identify the intended secure versions, then verify the updated images with the project's available build or image-scan checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, dockerfile, nginx
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100