[Snyk] Security upgrade nginx from 1.21-alpine to 1.27.4-alpine

[Samsonroyal]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• nginx/Dockerfile

We recommend upgrading to nginx:1.27.4-alpine, as this image has only 4 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-ALPINE315-LIBWEBP-5902238	829
	CVE-2023-44487 SNYK-ALPINE315-NGHTTP2-5964211	829
	Incorrect Default Permissions SNYK-ALPINE315-CURL-2938004	714
	Cleartext Transmission of Sensitive Information SNYK-ALPINE315-CURL-3320718	714
	Out-of-bounds Write SNYK-ALPINE315-ZLIB-2976173	714

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Incorrect Default Permissions

---

Important

Upgrade nginx base image in nginx/Dockerfile to 1.27.4-alpine to fix security vulnerabilities.

• Dockerfile Update:
  • Upgrade nginx base image from 1.21-alpine to 1.27.4-alpine in nginx/Dockerfile to address 5 security vulnerabilities.
  • New base image reduces known vulnerabilities from 5 to 4.

^{This description was created by for 93014ee. It will automatically update as commits are pushed.}

[ellipsis-dev]

👍 Looks good to me! Reviewed everything up to 93014ee in 48 seconds

More details

• Looked at 11 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 4 drafted comments based on config settings.

1. nginx/Dockerfile:1

• Draft comment:
  Ensure the new base image (nginx:1.27.4-alpine) is fully compatible with your application. Verify that upstream changes don't affect your configuration.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50%
  This comment is asking the PR author to verify compatibility and check upstream changes, which falls under the rule of not asking the author to ensure behavior or compatibility. It doesn't provide a specific suggestion or point out a specific issue.

2. nginx/Dockerfile:4

• Draft comment:
  Add a newline at the end of the file to follow best practices.
• Reason this comment was not posted:
  Comment was on unchanged code.

3. nginx/Dockerfile:1

• Draft comment:
  Base image updated to nginx:1.27.4-alpine for security fixes. Please ensure that existing nginx configurations are fully compatible with any changes in the new version.
• Reason this comment was not posted:
  Confidence changes required: 33% <= threshold 50%
  None

4. nginx/Dockerfile:4

• Draft comment:
  Consider adding a newline at the end of the file for better POSIX compliance and consistency.
• Reason this comment was not posted:
  Marked as duplicate.

Workflow ID: wflow_TS8nYdOA4LvhhVLb

---

You can customize Ellipsis with 👍 / 👎 feedback, review rules, user-specific overrides, quiet mode, and more.