Vulnerability Reportdrupal:11.3.19-fpm-alpine3.23

drupal:11.3.19-fpm-alpine3.23

digestsha256:9b85b4c7957f064694c2f17b09b61401b7faade647877058d8b69756e9748a6b

Executive Summary

Last scanned: Oct 20, 2026

Threat ScoreSAFE• Threat score is 0, which falls in the SAFE band (0-24).• Vulnerability stats report exposed_total 0 and post_total 0, with exposed_max_severity 0.0 and post_max_severity 0.0.• No exposed-surface or post-exploit findings were provided, so no CVE IDs are available to cite from INPUT 4 or INPUT 5.• Trust signals are strong: Docker Official publisher and image pinned by digest support production use.• The Drupal php-fpm context shows no reported findings that alter the production-use verdict.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The provided stats show no exposed or post-exploit findings, with all counts and maximum severities at zero. It is an official Docker image pinned by digest, which supports integrity and provenance. No CVE IDs were present in the provided findings, so there are no specific vulnerabilities to mitigate in this assessment.

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.