Vulnerability Reportphp:8.2.35-cli-alpine3.23

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The main concern is CVE-2026-111497, a high-severity memory corruption flaw in the Brotli decoder that could allow code execution in the PHP process if an application feeds it untrusted compressed data. Note: CVE-2026-111497 only applies when a downstream application or linked library decodes attacker-supplied Brotli data, which is not a default behavior of this interactive PHP shell image. Not passing untrusted Brotli input to the decoder in images built on top of this one would fully eliminate this specific risk. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.