Vulnerability Reportphp:8.5.12-fpm-alpine3.23

This base/runtime image is a clean foundation for building production images. It does contain vulnerabilities, with 31 exposed-surface findings and 18 post-exploit-only findings, but the highest exposed-surface severity is 5.59 and none are known to be actively exploited. Their low severity and the absence of known exploitation mean they do not raise the verdict, though images built on it should still be kept current as these findings are inherited. Because the image runs as root by default, downstream images should consider their own privilege settings. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.