github hankscafe/omnibus v1.0.9-beta.036
Omnibus v1.0.9-beta.036

7 hours ago

v1.0.9-beta.036 - fix(security): mitigate Docker Hub vulnerabilities for busybox, uuid, and postcss

  • Bumped base image from node:22-alpine to node:22-alpine3.20 in both build and runner stages to apply OS-level patches for busybox (CVE-2025-60876).
  • Expanded the Dockerfile surgical NPM patch script to find and destroy nested vulnerable versions of uuid and postcss.
  • Force-installed uuid@latest and postcss@latest into the standalone runtime directory to resolve GHSA-w5hq-g745-h8pq and CVE-2026-41305 without causing peer dependency conflicts.

Don't miss a new omnibus release

NewReleases is sending notifications on new releases.