Vulnerability Reportdrupal:10.6.13-php8.3-fpm-alpine3.23

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The only exposed vulnerability, CVE-2026-33630, is a use-after-free/double-free in c-ares that could lead to denial of service when processing malicious DNS responses. Although its severity is medium (6.0), it affects a core DNS resolution library and can be triggered remotely without authentication. There are no high-severity or critical vulnerabilities; the 16 post-exploit-only issues are all low severity. Applying a security update for c-ares would eliminate the risk.