Vulnerability Reportopenresty/openresty:1.31.1.1-alpine-fat

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The scan found 32 vulnerabilities, of which two are medium severity (max 6.48). The most notable is CVE-2026-45447, which affects OpenSSL's PKCS7_verify() and could allow remote code execution under specific conditions; however, it requires the application to process attacker-supplied PKCS#7 data, which is not typical for a default OpenResty web server configuration. No high-severity or critical vulnerabilities were identified, and the post-exploit analysis found no issues. Given the high community trust and reputable publisher, the overall risk is manageable if the relevant module is disabled.