[Snyk] Security upgrade node from 20.11.1-slim to iron-bookworm-slim

[BenJeau]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• frontend/Dockerfile.local

We recommend upgrading to node:iron-bookworm-slim, as this image has only 37 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-UPSTREAM-NODE-6564548	614
	Improper Control of Generation of Code ('Code Injection') SNYK-UPSTREAM-NODE-6615824	614
	HTTP Request Smuggling SNYK-UPSTREAM-NODE-6564550	514
	Integer Overflow or Wraparound SNYK-DEBIAN12-ZLIB-6008963	500
	Allocation of Resources Without Limits or Throttling SNYK-DEBIAN12-SYSTEMD-6277507	400

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Improper Control of Generation of Code ('Code Injection')

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"node","from":"20.11.1-slim","to":"iron-bookworm-slim"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No Known Exploit","id":"SNYK-UPSTREAM-NODE-6564548","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Allocation of Resources Without Limits or Throttling"},{"exploit_maturity":"No Known Exploit","id":"SNYK-UPSTREAM-NODE-6615824","priority_score":614,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Control of Generation of Code ('Code Injection')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-UPSTREAM-NODE-6564550","priority_score":514,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"severity","label":"medium","score":300},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"HTTP Request Smuggling"},{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-ZLIB-6008963","priority_score":500,"priority_score_factors":[{"type":"severity","label":"critical","score":500},{"type":"scoreVersion","label":"v1","score":1}],"severity":"critical","title":"Integer Overflow or Wraparound"},{"exploit_maturity":"No Known Exploit","id":"SNYK-DEBIAN12-SYSTEMD-6277507","priority_score":400,"priority_score_factors":[{"type":"severity","label":"high","score":400},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Allocation of Resources Without Limits or Throttling"}],"prId":"000477b1-0703-47f6-b292-2c9f516f9e8e","prPublicId":"000477b1-0703-47f6-b292-2c9f516f9e8e","packageManager":"dockerfile","priorityScoreList":[614,614,514,500,400],"projectPublicId":"4109bb3a-44af-41b3-942a-9b0536760147","projectUrl":"https://app.snyk.io/org/benjeau/project/4109bb3a-44af-41b3-942a-9b0536760147?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"auto","upgrade":["SNYK-DEBIAN12-SYSTEMD-6277507","SNYK-DEBIAN12-ZLIB-6008963","SNYK-UPSTREAM-NODE-6564548","SNYK-UPSTREAM-NODE-6564550","SNYK-UPSTREAM-NODE-6615824"],"vulns":["SNYK-UPSTREAM-NODE-6564548","SNYK-UPSTREAM-NODE-6615824","SNYK-UPSTREAM-NODE-6564550","SNYK-DEBIAN12-ZLIB-6008963","SNYK-DEBIAN12-SYSTEMD-6277507"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'

[deepsource-io]

Here's the code health analysis summary for commits 85b84e0..48be215. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Shell	✅ Success		View Check ↗
Rust	✅ Success		View Check ↗
JavaScript	✅ Success		View Check ↗

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.