Vulnerability Reportphp:8.3.31

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most critical findings include CVE-2019-9192 and CVE-2018-20796 in glibc, which could cause denial of service via uncontrolled recursion, and CVE-2018-5709 in krb5 which could allow integrity compromise. While these vulnerabilities are serious, some are disputed or require specific conditions. Post-exploitation risks are minimal, with no high-severity issues. Ensure that the final image is built with updated base layers or patches applied. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.