Vulnerability Reportdrupal:10.6.13-php8.3-fpm-bookworm

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit heap overflow in zlib (CVE-2023-45853) to execute arbitrary code, or use path traversal in perl-archive-tar (CVE-2026-42496) to read/write arbitrary files. Note: these vulnerabilities require specific conditions—CVE-2023-45853 needs processing of crafted zip files, and CVE-2026-42496 needs extraction of malicious tar archives—but the potential impact is severe. The sheer volume of vulnerabilities (1306 exposed, 22 with severity ≥7.0) makes this image unacceptable for any production environment.