Vulnerability Reportphp:latest

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most severe exposed vulnerabilities (CVE-2019-9192 and CVE-2018-5709) could allow denial of service via uncontrolled recursion or integrity corruption via integer overflow in glibc and krb5. These require network access and no authentication, posing a practical risk. Post-exploit findings are low-severity and unlikely to be exploited in isolation. While the image is official and trusted, the high volume of exposed findings demands remediation through updates or additional layers before production deployment. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.