Vulnerability Reportdrupal:10.6.14-apache-bookworm

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The container exposes 470 vulnerabilities, including 17 at severity 7 or higher, such as uncontrolled recursion in glibc (CVE-2018-20796) and XML entity expansion in expat (CVE-2024-28757). An attacker could likely trigger denial-of-service conditions by sending crafted patterns or XML payloads, potentially crashing the Apache/PHP process. The post-exploit-only findings are all low severity and do not add practical risk, but the exposed network-reachable vulnerabilities still warrant caution.