Vulnerability Reportphp:8.5.8-fpm-alpine3.23

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The single exposed vulnerability (CVE-2026-33630) in c-ares has severity 6.0 and could lead to service outage if the container performs DNS resolution over TCP. The 16 post-exploit-only vulnerabilities are all low severity (max 2.7) and pose no significant threat. No special configuration is needed for the exposed CVE to be exploitable. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.