Vulnerability Reportphp:8.5.8-cli-alpine3.23

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The primary concern is CVE-2026-33630 in c-ares, which could allow an attacker to cause memory corruption via crafted DNS responses, leading to denial of service or potential code execution. While the 16 post-exploit vulnerabilities are low severity, they should be patched for defense in depth. Remediation involves updating c-ares to a patched version. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.