Vulnerability Reportowasp/modsecurity-crs:3.3.10-nginx-202608131208

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The container exposes 310 vulnerabilities, with several high-severity issues in core libraries such as CVE-2018-20796 (uncontrolled recursion in glibc) and CVE-2018-6829 (semantic security flaw in libgcrypt) that could lead to denial of service or information disclosure if reachable. As an nginx-based WAF, this attack surface is likely internet-facing, increasing the likelihood of exploitation. The presence of 203 post-exploit findings, though lower severity (max 4.5), adds further risk once an initial foothold is gained.