tund/dashboard
Compare
dashboard:main-ca5b8d3 → main-2b5ae4b
From
To
Platform
Summary
What changed
Platform linux/amd64
From
- Reference
- main-ca5b8d3
- Digest
- 7c5aa31dd72a8857
- Index
- 8bdaabff65bd6926
- Platform
- linux/amd64
- Size
- 80.2 MiB · 8 layers
- Pushed
- Oct 6, 2026 (18d ago)
- Created
- Oct 1, 2026
size +548 KiBlayers +2 −2config unchangedfindings +7 −0
To
- Reference
- main-2b5ae4b
- Digest
- 90502d06f5ff4f77
- Index
- 9309816f12b83240
- Platform
- linux/amd64
- Size
- 80.7 MiB · 8 layers
- Pushed
- Oct 20, 2026 (4d ago)
- Created
- Oct 20, 2026
2 added (22.8 MiB) 2 removed (22.3 MiB)6 unchanged
| # | Instruction | Digest | Size | |
|---|---|---|---|---|
| = | 1→1 | ADD alpine-minirootfs-3.24.2-x86_64.tar.gz / # buildkit | e2de96513ba9 | 3.7 MiB |
| = | 2→2 | RUN /bin/sh -c addgroup -g 1000 node && adduser -u 1000 -G node -s /bin/sh -D node && apk add --no-cache libstdc++ && apk add --no-cache --virtual .build-deps curl && ARCH= OPENSSL_ARCH='linux*' && alpineArch="$(apk --print-arch)" && case "${alpineArch##*-}" in x86_64) ARCH='x64' CHECKSUM="9b177f0c140a82a3d247e8f54586a65dbdf91e5e3a01f04708dabfdc9e0e01c4" OPENSSL_ARCH=linux-x86_64;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; s390x) OPENSSL_ARCH=linux-s390x;; *) echo "unsupported architecture"; exit 1 ;; esac && if [ -n "${CHECKSUM}" ]; then set -eu; curl -fsSLO --compressed "https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz"; echo "$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo "Building from source" && apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xf "node-v$NODE_VERSION.tar.xz" && cd "node-v$NODE_VERSION" && ./configure && make -j$(getconf _NPROCESSORS_ONLN) V= && make install && apk del .build-deps-full && cd .. && rm -Rf "node-v$NODE_VERSION" && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt; fi && rm -f "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apk del .build-deps && node --version && npm --version && rm -rf /tmp/* # buildkit | f7f2d304681a | 53.0 MiB |
| = | 3→3 | RUN /bin/sh -c apk add --no-cache --virtual .build-deps-yarn curl gnupg tar && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apk del .build-deps-yarn && yarn --version && rm -rf /tmp/* # buildkit | e554276b05e6 | 1.2 MiB |
| = | 4→4 | COPY docker-entrypoint.sh /usr/local/bin/ # buildkit | d39db1cf9caa | 447 B |
| = | 5→5 | WORKDIR /app | 885eaa677206 | 93 B |
| = | 6→6 | RUN /bin/sh -c addgroup -S -g 1001 tund && adduser -S -u 1001 -G tund tund # buildkit | 94c088044af6 | 963 B |
| − | 7→· | COPY --chown=tund:tund /app/.next/standalone ./ # buildkit | cef266674d4a | 21.8 MiB |
| − | 8→· | COPY --chown=tund:tund /app/.next/static ./.next/static # buildkit | acedd30d12c0 | 519 KiB |
| + | ·→7 | COPY --chown=tund:tund /app/.next/standalone ./ # buildkit | 751cbbf18310 | 22.3 MiB |
| + | ·→8 | COPY --chown=tund:tund /app/.next/static ./.next/static # buildkit | 227475dd66a6 | 561 KiB |
No differences.
| Key | main-ca5b8d3 | main-2b5ae4b |
|---|---|---|
| Entrypoint | docker-entrypoint.sh | docker-entrypoint.sh |
| Command | node server.js | node server.js |
| User | tund | tund |
| Working directory | /app | /app |
| Exposed ports | 3000/tcp | 3000/tcp |
| Platform | linux/amd64 | linux/amd64 |
| Environment (0 of 7 changed) | ||
| HOSTNAME | 0.0.0.0 | 0.0.0.0 |
| NEXT_TELEMETRY_DISABLED | 1 | 1 |
| NODE_ENV | production | production |
| NODE_VERSION | 22.23.3 | 22.23.3 |
| PATH | /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin | /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| PORT | 3000 | 3000 |
| YARN_VERSION | 1.22.22 | 1.22.22 |
| Labels (0 of 2 changed) | ||
| org.opencontainers.image.description | tund dashboard | tund dashboard |
| org.opencontainers.image.source | https://github.com/ruohki/tund | https://github.com/ruohki/tund |
main-ca5b8d3
H 11M 9L 121 findings · scanned 18d ago
main-2b5ae4b
H 12M 14L 228 findings · scanned 4d ago
New in main-2b5ae4b 71 high, 5 medium, 1 low
| Severity | Vulnerability | Package | Fixed in |
|---|---|---|---|
| High | CVE-2026-94483 | next | 16.3.8 |
| Medium | CVE-2026-94484 | next | 16.3.8, 15.5.27 |
| Medium | CVE-2026-94485 | next | 16.3.8 |
| Medium | CVE-2026-94543 | next | 15.5.27, 16.3.8 |
| Medium | CVE-2026-94544 | next | 16.3.8 |
| Medium | CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | CVE-2026-94486 | next | 16.3.8 |
Fixed since main-ca5b8d3 0nothing fixed
None.
Unchanged 20
| Severity | Vulnerability | Package | Fixed in |
|---|---|---|---|
| High | CVE-2026-102276 | brace-expansion | 5.0.10, 3.0.7, 2.1.5, 1.1.19 |
| High | CVE-2026-102278 | brace-expansion | 5.0.11, 3.0.8, 2.1.6, 1.1.20 |
| High | CVE-2026-13149 | brace-expansion | 5.0.7, 1.1.16, 2.1.2 |
| High | CVE-2026-14257 | brace-expansion | 5.0.8, 3.0.3, 2.1.3, 1.1.17 |
| High | CVE-2026-69152 | brace-expansion | 1.1.18, 2.1.4, 3.0.6, 5.0.9 |
| High | CVE-2026-93748 | http-cache-semantics | no fix yet |
| High | CVE-2026-69192 | ip-address | 10.3.1 |
| High | CVE-2026-9496 | pacote | 21.5.1 |
| High | CVE-2026-33671 | picomatch | 4.0.4, 3.0.2, 2.3.2 |
| High | CVE-2026-48815 | sigstore | 4.1.1 |
| Medium | CVE-2026-48758 | @sigstore/core | 3.2.1 |
| Medium | CVE-2026-102277 | brace-expansion | 5.0.12, 3.0.9, 2.1.7, 1.1.21 |
| Medium | CVE-2026-33750 | brace-expansion | 5.0.5, 3.0.2, 2.0.3, 1.1.13 |
| Medium | CVE-2026-101911 | ip-address | 10.7.1 |
| Medium | CVE-2026-101912 | ip-address | 10.7.1 |
| Medium | CVE-2026-101913 | ip-address | 10.5.1 |
| Medium | CVE-2026-42338 | ip-address | 10.1.1 |
| Medium | CVE-2026-33672 | picomatch | 4.0.4, 3.0.2, 2.3.2 |
| Medium | CVE-2026-104844 | postcss-selector-parser | 7.1.6 |
| Low | CVE-2026-9358 | postcss-selector-parser | 6.1.3, 7.1.3 |
Neither manifest carries annotations.