Vulnerability Reportnginx:alpine

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The most notable item is CVE-2026-111497 in brotli-libs, which is listed as actively exploited, but nginx does not load that library directly, so it is only relevant if another tool in the container processes attacker-supplied Brotli data. The scan's other exposed findings are rated at 6.0 or below, and the post-compromise findings are low severity, so none of them drive the verdict on their own. Updating brotli-libs in a rebuilt image is the straightforward way to close the open item.