As node-alpine is still using alpine 3.9 - the base image is vulnerable - CVE-2019-14697.
This is fixed in alpine 3.10/latest and as there are other vulnerabilities coming to light so we will aim to keep this image up to date as they pop up.
This is a patched image based on alpine 3.10.1.