From a5fbe511c5fb30feac23ef43785eca0af63cd3a2 Mon Sep 17 00:00:00 2001
From: cloudneutral <haitaopanhq@gmail.com>
Date: Sat, 6 Dec 2025 19:58:00 +0800
Subject: [PATCH] Improve dashboard security baseline (#766)

---
 dashboard/Dockerfile        | 3 ++-
 dashboard/package-lock.json | 6 +++---
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/dashboard/Dockerfile b/dashboard/Dockerfile
index 943e4b9..cb2831a 100644
--- a/dashboard/Dockerfile
+++ b/dashboard/Dockerfile
@@ -47,7 +47,8 @@ ENV NODE_ENV=production \
 # ---------------------------
 RUN apt-get update \
     && apt-get install -y --no-install-recommends tini ca-certificates \
-    && apt-get upgrade -y \
+    && apt-get dist-upgrade -y \
+    && apt-get install -y --no-install-recommends --only-upgrade libpam-modules libpam-modules-bin libpam-runtime libpam0g zlib1g \
     && rm -rf /var/lib/apt/lists/*
 
 # ---------------------------
diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index 7782fb2..b108235 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -9450,9 +9450,9 @@
       }
     },
     "node_modules/sucrase/node_modules/glob": {
-      "version": "10.4.5",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz",
-      "integrity": "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==",
+      "version": "10.5.0",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz",
+      "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==",
       "dev": true,
       "license": "ISC",
       "dependencies": {