[jomspk]

Summary

The Docker image is built on oven/bun:1.4.3-alpine, and the Brotli decoder bundled with that Bun has an out-of-bounds write: CVE-2026-111497 (GHSA-663w-cv8g-jj2p). Bun 1.4.4 is the first release with the fix. Until it is in the image, any path that makes Bun decompress Brotli data supplied by someone else can crash the process, leak memory, or be pushed toward code execution. Examples are node:zlib, or fetch decoding a Content-Encoding: br response. The current latest image on GHCR still ships Bun 1.4.3.

This PR moves the base image to oven/bun:1.4.4-alpine. LibreChat made the same kind of upgrade for Node.js in LibreChat-AI/LibreChat#17332. The Dockerfile is the only place that pins Bun: CI installs the current release through oven-sh/setup-bun@v2, and @types/bun is already ^1.4.4.

 # --- Base ---
-FROM oven/bun:1.4.3-alpine AS base
+FROM oven/bun:1.4.4-alpine AS base

Change Type

• Bug fix (non-breaking change which fixes an issue)

Testing

• Built the image from this branch with docker build .. Both bun install --frozen-lockfile steps still pass, so Bun 1.4.4's change to peer-dependency resolution does not touch this lockfile.
• bun --version inside the image prints 1.4.4.
• Started the container with PORT=3000 and a SESSION_SECRET. The server logged Admin panel listening, GET /health from inside the container returned 200, and the image's own HEALTHCHECK reported healthy.

Test Configuration:

Docker 29.2.1 on macOS (arm64), image built for the host architecture.

Checklist

• I have performed a self-review of my own code
• My changes do not introduce new warnings