Vulnerability Reportphp:8.4.23-fpm

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could achieve remote code execution or cause denial of service by sending malicious XML or regex patterns. Remediation requires updating libxml2 and glibc packages to patched versions. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.