From eb3a93e49d50a02eb2a663dbbe6d4e4d310ea2d0 Mon Sep 17 00:00:00 2001 From: Taras Hlukhovetskyi Date: Thu, 18 Jun 2026 16:10:32 +0300 Subject: [PATCH 1/2] [FIX] [SecVul] [4.0.x] ui/mlrun-ui Critical --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 68442ff3f..6cd0ea0c4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -34,7 +34,8 @@ RUN echo ${COMMIT_HASH} > ./build/COMMIT_HASH && \ echo ${DATE} > ./build/BUILD_DATE # production stage -FROM gcr.io/iguazio/nginx-unprivileged:1.21-alpine as production-stage + +FROM gcr.io/iguazio/nginx-unprivileged:1.29-alpine AS production-stage # align UID & GID with nginx-unprivileged image UID & GID ARG UID=101 From 072574e99e30a2a2647397175ac6db5593711e78 Mon Sep 17 00:00:00 2001 From: Taras Hlukhovetskyi Date: Mon, 22 Jun 2026 12:26:00 +0300 Subject: [PATCH 2/2] bump nginx version --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 6cd0ea0c4..8822f3795 100644 --- a/Dockerfile +++ b/Dockerfile @@ -35,7 +35,7 @@ RUN echo ${COMMIT_HASH} > ./build/COMMIT_HASH && \ # production stage -FROM gcr.io/iguazio/nginx-unprivileged:1.29-alpine AS production-stage +FROM gcr.io/iguazio/nginx-unprivileged:1.31.1-alpine AS production-stage # align UID & GID with nginx-unprivileged image UID & GID ARG UID=101