[Snyk] Security upgrade node from 18.13.0 to 18.20.5

[esecdj]

Snyk has created this PR to fix 2 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to node:18.20.5, as this image has only 167 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	CVE-2023-44487 SNYK-DEBIAN11-NGHTTP2-5953384	829

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[esecdj]

Checkmarx One – Scan Summary & Details – 5f999f5b-976b-4dd4-b4d5-2b6ba321740a

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 2	A user should be specified in the dockerfile, otherwise the image will run as root
	Passwords And Secrets - Generic Password	/docker-compose.yml: 24	Query to find passwords and secrets in infrastructure code.
	Container Traffic Not Bound To Host Interface	/docker-compose.yml: 8	Incoming container traffic should be bound to a specific host interface
	Container Traffic Not Bound To Host Interface	/docker-compose.yml: 18	Incoming container traffic should be bound to a specific host interface
	Container Traffic Not Bound To Host Interface	/docker-compose.yml: 26	Incoming container traffic should be bound to a specific host interface
	Healthcheck Not Set	/docker-compose.yml: 3	Check containers periodically to see if they are running properly.
	Healthcheck Not Set	/docker-compose.yml: 15	Check containers periodically to see if they are running properly.
	Healthcheck Not Set	/docker-compose.yml: 20	Check containers periodically to see if they are running properly.
	Memory Not Limited	/docker-compose.yml: 3	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Memory Not Limited	/docker-compose.yml: 20	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Memory Not Limited	/docker-compose.yml: 15	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Pids Limit Not Set	/docker-compose.yml: 15	'pids_limit' should be set and different than -1
	Pids Limit Not Set	/docker-compose.yml: 20	'pids_limit' should be set and different than -1
	Pids Limit Not Set	/docker-compose.yml: 3	'pids_limit' should be set and different than -1
	Security Opt Not Set	/docker-compose.yml: 3	Attribute 'security_opt' should be defined.
	Security Opt Not Set	/docker-compose.yml: 15	Attribute 'security_opt' should be defined.
	Security Opt Not Set	/docker-compose.yml: 20	Attribute 'security_opt' should be defined.
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 57	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/snyk-test-sarif.yml: 8	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 46	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/snyk-test-sarif.yml: 15	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 71	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/snyk-code.yml: 15	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/snyk-code.yml: 8	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/snyk-code-manual.yml: 13	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	CVE-2024-21538	Npm-cross-spawn-6.0.5	Vulnerable Package
	CVE-2024-21538	Npm-cross-spawn-5.1.0	Vulnerable Package
	CVE-2024-21538	Npm-cross-spawn-4.0.2	Vulnerable Package
	Container Capabilities Unrestricted	/docker-compose.yml: 3	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Container Capabilities Unrestricted	/docker-compose.yml: 15	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Container Capabilities Unrestricted	/docker-compose.yml: 20	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Cpus Not Limited	/docker-compose.yml: 20	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Cpus Not Limited	/docker-compose.yml: 3	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Cpus Not Limited	/docker-compose.yml: 15	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Healthcheck Instruction Missing	/Dockerfile: 2	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 4	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

Fixed Issues

Severity	Issue	Source File / Package
	Frameable_Login_Page	/routes/index.js: 241