Vulnerability Reportwordpress:7.0.0-php8.5-fpm-alpine

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who can spoof DNS responses could exploit CVE-2026-33630 to cause a use-after-free, leading to memory corruption and container crash (denial of service). The vulnerability is in c-ares, a core DNS resolution library, making it remotely exploitable with no authentication. Although no post-exploit issues exist, the single high-severity finding warrants caution; consider restricting outbound DNS queries to trusted resolvers.