Title: Request: bump minimatch (GHSA-3ppc-4f35-3m26) in node:24.x-alpine images · Issue #2385 · nodejs/docker-node · GitHub
Open Graph Title: Request: bump minimatch (GHSA-3ppc-4f35-3m26) in node:24.x-alpine images · Issue #2385 · nodejs/docker-node
X Title: Request: bump minimatch (GHSA-3ppc-4f35-3m26) in node:24.x-alpine images · Issue #2385 · nodejs/docker-node
Description: Hello, Docker Hub currently reports GHSA-3ppc-4f35-3m26 (minimatch < 10.2.1) for node:24.x-alpine images. Could you please confirm whether the bundled npm version in the current 24.x images includes minimatch >= 10.2.1? If not, would it ...
Open Graph Description: Hello, Docker Hub currently reports GHSA-3ppc-4f35-3m26 (minimatch < 10.2.1) for node:24.x-alpine images. Could you please confirm whether the bundled npm version in the current 24.x images include...
X Description: Hello, Docker Hub currently reports GHSA-3ppc-4f35-3m26 (minimatch < 10.2.1) for node:24.x-alpine images. Could you please confirm whether the bundled npm version in the current 24.x images incl...
Opengraph URL: https://github.com/nodejs/docker-node/issues/2385
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Request: bump minimatch (GHSA-3ppc-4f35-3m26) in node:24.x-alpine images","articleBody":"Hello,\n\nDocker Hub currently reports GHSA-3ppc-4f35-3m26 (minimatch \u003c 10.2.1) for node:24.x-alpine images.\n\nCould you please confirm whether the bundled npm version in the current 24.x images includes minimatch \u003e= 10.2.1?\n\nIf not, would it be possible to bump the bundled npm / dependency chain in an upcoming 24.x release so the image no longer flags this CVE?\n\nThank you.","author":{"url":"https://github.com/mstreitner","@type":"Person","name":"mstreitner"},"datePublished":"2026-02-23T14:11:12.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":6},"url":"https://github.com/2385/docker-node/issues/2385"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:7faae6aa-799e-d7f0-f97a-4451ab63ce9a |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | C1D8:1081DA:9E90F3:D8D3D7:6A4D50C4 |
| html-safe-nonce | 859c998142789ec3e59bcb5620af5f971935b030f0fd98468224007b90abb117 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDMUQ4OjEwODFEQTo5RTkwRjM6RDhEM0Q3OjZBNEQ1MEM0IiwidmlzaXRvcl9pZCI6IjQ3NDIyMDcxNTQ2Mjk3MTU4OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | bd3ce48049e53c636b1640bb82dbb0559206219e44e06af6b34785f5c290a21c |
| hovercard-subject-tag | issue:3978389168 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/nodejs/docker-node/2385/issue_layout |
| twitter:image | https://opengraph.githubassets.com/8654274ff1307692078173a0843919762b0aa779f33e833e1a6cfee966f3ef0e/nodejs/docker-node/issues/2385 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/8654274ff1307692078173a0843919762b0aa779f33e833e1a6cfee966f3ef0e/nodejs/docker-node/issues/2385 |
| og:image:alt | Hello, Docker Hub currently reports GHSA-3ppc-4f35-3m26 (minimatch < 10.2.1) for node:24.x-alpine images. Could you please confirm whether the bundled npm version in the current 24.x images include... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | mstreitner |
| hostname | github.com |
| expected-hostname | github.com |
| None | 92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6 |
| turbo-cache-control | no-preview |
| go-import | github.com/nodejs/docker-node git https://github.com/nodejs/docker-node.git |
| octolytics-dimension-user_id | 9950313 |
| octolytics-dimension-user_login | nodejs |
| octolytics-dimension-repository_id | 27929056 |
| octolytics-dimension-repository_nwo | nodejs/docker-node |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 27929056 |
| octolytics-dimension-repository_network_root_nwo | nodejs/docker-node |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 56fc8347865a14e2ec811533d68f929cf4e0ec19 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width