Skip to content

Upgrade ShinyProxy to 3.2.4 to fix CVE vulnerabilities#338

Open
benhayes21 wants to merge 1 commit into
mainfrom
fix/shinyproxy-cve-337
Open

Upgrade ShinyProxy to 3.2.4 to fix CVE vulnerabilities#338
benhayes21 wants to merge 1 commit into
mainfrom
fix/shinyproxy-cve-337

Conversation

@benhayes21

Copy link
Copy Markdown
Contributor

Summary

  • Upgrades ShinyProxy from 2.6.1 to 3.2.4, resolving 74 CVEs (13 critical, 61 high) listed in Shiny proxy image CVE #337
  • Updates base image from ubuntu:20.04 to ubuntu:24.04 to meet the JDK 17+ requirement of ShinyProxy 3.x
  • Fixes logging.filelogging.file.name in all application.yml files for Spring Boot 3.x compatibility

Test plan

  • Build Dockerfile.oasisui_proxy and confirm image builds successfully
  • Verify ShinyProxy starts and the Oasisui app launches correctly
  • Confirm logging writes to shinyproxy.log as expected

Closes #337

🤖 Generated with Claude Code

Bumps shinyproxy from 2.6.1 to 3.2.4 (74 CVEs fixed, 13 critical) and
updates the base image from ubuntu:20.04 to ubuntu:24.04 to satisfy the
JDK 17+ requirement of ShinyProxy 3.x. Fixes logging config key for
Spring Boot 3.x compatibility.

Closes #337

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

Shiny proxy image CVE

2 participants