Vulnerability Reportphp:8.4.24-apache

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit CVE-2026-42496 to read or write files outside the intended extraction directory, or trigger CVE-2018-20796 to cause denial of service via uncontrolled recursion. The image has 905 exposed vulnerabilities, but the post-exploit findings are all low severity, so the immediate risk is from the exposed surface. Prioritize patching the glibc and perl packages before building on this base. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.