Vulnerability Reportdrupal:10.6.13-php8.3-fpm-alpine

drupal:10.6.13-php8.3-fpm-alpine

DIGESTsha256:61e117c9c36768ab71978583cb0a1f1258082702709addc2f8ee8f0ac9791866

Executive Summary

Last scanned: Jul 16, 2026

Threat ScoreNEEDS ATTENTION• Image is an official Docker Hub image pinned by digest (immutable), ensuring supply chain integrity.• Only 1 exposed vulnerability identified (CVE-2026-33630, severity 6.0) with no post-exploit issues.• CVE-2026-33630 affects c-ares DNS resolver and could cause denial of service via crafted DNS responses, requiring a malicious DNS server.• Exploitation is limited to crash/DoS; no data exposure or remote code execution.

25/100NEEDS ATTENTION

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. It contains one moderate-severity vulnerability (CVE-2026-33630, severity 6.0) in the c-ares DNS resolution library. An attacker with control over a DNS server could trigger a use-after-free, causing a denial of service (crash or memory corruption) of the Drupal application. Applying the latest security updates for c-ares fully eliminates this risk. No post-exploit vulnerabilities were found.

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-33630	MEDIUM6	c-ares 1.34.6-r0 fixed in 1.34.8-r0	—	Directly ExposedContext importance: MEDIUM

Want to check another image? Run a full scan with the Docker Security Scanner.