BETA Shoulder is in beta — Findings may sometimes be wrong. Your feedback shapes what we fix next. Share feedback
Shoulder.dev

Understand what every change actually did to your system.
Rules / Dockerfile

Dockerfile Uses Outdated Node.js Version

MEDIUM CWE-1104 · CWE-1104

Description

Detects Dockerfiles using outdated or end-of-life Node.js versions.

What Shoulder detects

Dockerfile uses {issue_type} which is end-of-life or outdated. IMPORTANT: Update to node:24-alpine (Active LTS) or node:22-alpine (Maintenance LTS). Do NOT downgrade - always use the latest LTS version.

How to fix

Update to a supported Node.js LTS version.

```dockerfile
FROM node:24-alpine
```

Learn more: https://shoulder.dev/learn/docker/cwe-1104/outdated-node-version

Applies to

Languages

🐳 Dockerfile

Frameworks

docker

References

Documentation ↗ Learn about CWE-1104

Scan for this issue

Detect with Shoulder CLI
npx @shoulderdev/cli trust --rule=docker-outdated-node-version .

Related rules

Docker Base Image Security MEDIUM Use npm ci for Reproducible Builds LOW .nvmrc Specifies Outdated Node.js Version MEDIUM Node.js Version Mismatch Between Configuration Files MEDIUM
← All Rules Source: rules/docker/security/nodejs/outdated-node-version.yaml