RCE fix

Dockerfile

@@ -1,16 +1,20 @@
 # Build stage
-FROM node:18-alpine AS builder
+FROM --platform=$BUILDPLATFORM node:25-slim AS builder
 WORKDIR /app
-COPY package*.json ./
-RUN npm install
+
+# Install pnpm
+RUN npm install -g pnpm
+
+COPY package.json pnpm-lock.yaml* ./
+RUN pnpm install --frozen-lockfile
 COPY . .
-RUN npm run build
+RUN pnpm run build
 
 # Production stage
-FROM node:18-alpine AS runner
+FROM node:25-slim AS runner
 WORKDIR /app
 
-ENV NODE_ENV production
+ENV NODE_ENV=production
 
 # Create non-root user
 RUN addgroup --system --gid 1001 nodejs
@@ -28,7 +32,7 @@ USER nextjs
 
 EXPOSE 3000
 
-ENV PORT 3000
-ENV HOSTNAME "0.0.0.0"
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
 
 CMD ["node", "server.js"]