Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 20, 2025

This PR contains the following updates:

Package Type Update Change
googleapis/release-please-action action minor v4.2.0 -> v4.4.0

Release Notes

googleapis/release-please-action (googleapis/release-please-action)

v4.4.0

Compare Source

v4.3.0

Compare Source

Features
  • deps: update release-please to 17.1.2 (f07192c)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) August 20, 2025 22:02
@renovate renovate bot requested a review from lotyp as a code owner August 20, 2025 22:02
@github-actions github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Aug 20, 2025
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:4fbf3a7774db2d1bcde3194e5355da56decc13a6cf3cd002339b5cadf1fa6a21
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages118
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • 84499e7665570bbef8ca20d15c642d8d9485a887d6be7a8b335ca33b5d3126f0
digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.21

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:96f839e05e0d9ae739681e289e5693220586f0023f2f126d557730d01170a23d
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size81 MB
packages120
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • e4f9bb894d0d59558802c50d63685a084b2b4fb7eb77398e783423beab34d48f
digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
2 weeks ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
2 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.11-alpine3.21
  • 8-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.11
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
2 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.24-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.24
2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
2 weeks ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
2 weeks ago



@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.11-alpine3.22
Digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size42 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.11
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.11-alpine, 8.4.11-alpine3.22, 8.4.11-cli-alpine, 8.4.11-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:c3e559f56cdc45b48cfee640de5c5d8067b7d071a4cbbef5d8ce49cfe21ad303
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size75 MB
packages121
📦 Base Image oisupport/staging-amd64:639b54f0afafe1a50d5dfdf4306b05aa09357ed7292390e3ed242ecfc57cc7e0
also known as
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • 8.4-fpm-alpine
  • 8.4-fpm-alpine3.22
  • 8.4.11-fpm-alpine
  • 8.4.11-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
digestsha256:dd4b38d02d63413f45aea06eaaf1ac2410b7cbe81b017efd3d6feefb142809b2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :639b54f0afafe1a50d5dfdf4306b05aa09357ed7292390e3ed242ecfc57cc7e0

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:ce496fbbceec074229c9b91843bf8601cf626d90e0fd7c387886ccd15e65c3cb
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size75 MB
packages120
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • d8f4974194fb8fae35528e5ff3f03ca3566ee2e502f953b7817e0cbefebf8a0d
digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:a0d8ace7155d530368ec2f25bf7f76fef10452919a3e63b2ea311b3c788701a6
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size68 MB
packages119
📦 Base Image oisupport/staging-amd64:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.21
  • 8.1.33-fpm-alpine
  • 8.1.33-fpm-alpine3.21
  • da3eabe89d0c6c833838e3480d063d65f38577bc37dc976948b9352f3fb3d2fb
digestsha256:4268ab6c629f48d1f77ff76b70355c1f384d95028c301d7a9d07a5f1644d4072
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.21

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :8.1-fpm-alpine

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:ade5d3761d44492a454e08b4d9da9eea494dee0aae3f91e4d5cb2caf2071a5e9
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • b026e7d2fc6d7801e1af55dc42c7409b2f38d6b42c32494e9276b6ef40a28ee3
digestsha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
2 weeks ago



@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.24-alpine3.22
Digestsha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.24
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.24-alpine, 8.3.24-alpine3.22, 8.3.24-cli-alpine, 8.3.24-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
2 weeks ago



@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:9742ced0749c671a521a5db5251288bb086dc722f3946c2f8c278a7d722b8a47
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size70 MB
packages121
📦 Base Image php:3effc26a4a8524994f6fd9e3c99f564bfdee610687d2d1d455996608118a910f
also known as
  • 8.2-fpm-alpine
  • 8.2-fpm-alpine3.22
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
digestsha256:a992b4453c7ffe21584867dced3a8b82c896603a10bfe3f7ec734729e26fcda5
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:775d2a4b717639eb742ed8687712b665c001cc842dd772c1f650309770426824
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size71 MB
packages121
📦 Base Image oisupport/staging-amd64:2bc2a355c610a5ce2f4854d785c740aafe346f652caa7a4960796338a17a0ffe
also known as
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.22
  • 8.3.24-fpm-alpine
  • 8.3.24-fpm-alpine3.22
digestsha256:994a36314a28fed17d2d9d66ff694817dcf51343c7d42e1890ec75b3406a3caf
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-fpm-alpine

Name8.2.29-fpm-alpine3.22
Digestsha256:a992b4453c7ffe21584867dced3a8b82c896603a10bfe3f7ec734729e26fcda5
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size32 MB
Packages61
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.29-fpm-alpine, 8.2.29-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.24-fpm-alpine
  • 8.3.24-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
2 weeks ago



8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.11-fpm-alpine
  • 8.4.11-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
2 weeks ago



@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :2bc2a355c610a5ce2f4854d785c740aafe346f652caa7a4960796338a17a0ffe

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:0f27210915467ba18de9bd39724b29bfa0c9062c15380e5b78fbb4a1b8d2e993
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size94 MB
packages158
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • d8f4974194fb8fae35528e5ff3f03ca3566ee2e502f953b7817e0cbefebf8a0d
digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:550223244835b9e39a0d894a1c107e51455a7222b9aa6bcfe6d2efb2e073a476
vulnerabilitiescritical: 0 high: 3 medium: 0 low: 0
platformlinux/amd64
size91 MB
packages139
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • 84499e7665570bbef8ca20d15c642d8d9485a887d6be7a8b335ca33b5d3126f0
digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.21

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

high 7.7: CVE--2025--47273 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range<78.1.1
Fixed version78.1.1
CVSS Score7.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
EPSS Score0.139%
EPSS Percentile35th percentile
Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details

 def _download_url(self, url, tmpdir): # Determine download filename # name, _fragment = egg_info_for_url(url) if name: while '..' in name: name = name.replace('..', '.').replace('\\', '_') else: name = "__downloaded__" # default if URL has no path contents if name.endswith('.[egg.zip](http://egg.zip/)'): name = name[:-4] # strip the extra .zip before download --> filename = os.path.join(tmpdir, name) 

Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:897b1110c4aa1486b9234e8a3168135e785d6defdf5e1989099aa1eb99eed3e4
vulnerabilitiescritical: 0 high: 2 medium: 0 low: 0
platformlinux/amd64
size100 MB
packages158
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • e4f9bb894d0d59558802c50d63685a084b2b4fb7eb77398e783423beab34d48f
digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 2 medium: 0 low: 0 postgresql17 17.5-r0 (apk)

pkg:apk/alpine/postgresql17@17.5-r0?os_name=alpine&os_version=3.22

high : CVE--2025--8715

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.045%
EPSS Percentile13th percentile
Description

high : CVE--2025--8714

Affected range<17.6-r0
Fixed version17.6-r0
EPSS Score0.058%
EPSS Percentile18th percentile
Description
@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
2 weeks ago



@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
2 weeks ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
2 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.11-alpine3.21
  • 8-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.11
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
2 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.24-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.24
2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
2 weeks ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
2 weeks ago



@github-actions
Copy link

github-actions bot commented Aug 20, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.11-alpine3.22
Digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size42 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.11
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.11-alpine, 8.4.11-alpine3.22, 8.4.11-cli-alpine, 8.4.11-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@renovate renovate bot changed the title deps(deps): update googleapis/release-please-action action to v4.3.0 deps(deps): update googleapis/release-please-action action to v4.4.0 Oct 24, 2025
@renovate renovate bot force-pushed the renovate/googleapis-release-please-action-4.x branch from 301f817 to df28cc3 Compare October 24, 2025 02:41
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:4d65376fe85802fe56364521b1221b93eee9bf144b092d064c1dcdb4b11ced34
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • df7d2aca7d453249829e16923877c821823065f32a24e0eb2c66e7a12fd7b54b
digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed2 months ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.13
4 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.26-cli-alpine
  • 8.3.26-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.26-alpine
  • 8.3.26-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:bde074b4dc563410d22c689ffecef3c29f72abdea813a294ae2cdd9519c0a51a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size75 MB
packages121
📦 Base Image php:8-fpm-alpine
also known as
  • 8-fpm-alpine3.22
  • 8.4-fpm-alpine
  • 8.4-fpm-alpine3.22
  • 8.4.13-fpm-alpine
  • 8.4.13-fpm-alpine3.22
  • be12027ae933c17a29d9cf56e2480967afd04719fa2f20358ea1ad257a435605
  • fpm-alpine
  • fpm-alpine3.22
digestsha256:4efaf7966df90365b41e71d5085b1c49348acb80bc5e0aa709de2b9b5f4dcb35
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:b14ad546452dca805701b8aa8dc0a853eaddd1c13215cf54216e99f2ce5e0f03
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image php:74ac207bc0116b73c198b79097c2361bd6912313efa113924e020d0c351b6e34
also known as
  • 8.3-alpine
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.26-alpine
  • 8.3.26-alpine3.22
  • 8.3.26-cli-alpine
  • 8.3.26-cli-alpine3.22
digestsha256:990340d4a014d0090ec564f95d4fdca42b3cbeeaf8b9f0ac9105c1707cff72aa
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:fa8900af723ca67c1459f3c276c5e2f3efcc9007405a0c73cd116c458d8ab6c3
vulnerabilitiescritical: 2 high: 2 medium: 0 low: 0
platformlinux/amd64
size68 MB
packages119
📦 Base Image php:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.21
  • 8.1.33-fpm-alpine
  • 8.1.33-fpm-alpine3.21
  • a5705c7e8a9637ec417dc448b6afb91982a252f2f08a056af3166d3e0b36cc0e
digestsha256:3f6d33709f6648a334f44757f43bc6c9e4c4390b4ff555199f28377601455de9
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.438%
EPSS Percentile62nd percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.251%
EPSS Percentile48th percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.152%
EPSS Percentile36th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.128%
EPSS Percentile33rd percentile
Description
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-fpm-alpine

Namefpm-alpine3.22
Digestsha256:4efaf7966df90365b41e71d5085b1c49348acb80bc5e0aa709de2b9b5f4dcb35
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed4 weeks ago
Size36 MB
Packages61
Flavoralpine
OS3.22
The base image is also available under the supported tag(s): 8-fpm-alpine3.22, 8.4-fpm-alpine, 8.4-fpm-alpine3.22, 8.4.13-fpm-alpine, 8.4.13-fpm-alpine3.22, fpm-alpine, fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.26-fpm-alpine
  • 8.3.26-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image is smaller by 2.7 MB
  • Tag was pushed more recently
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • 8.2-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image is smaller by 3.3 MB
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
2 months ago



8.1-fpm-alpine3.22
Minor runtime version update
Also known as:
  • 8.1.33-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image is smaller by 3.8 MB
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
2 months ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.26-alpine3.22
Digestsha256:990340d4a014d0090ec564f95d4fdca42b3cbeeaf8b9f0ac9105c1707cff72aa
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed4 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.26
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.26-alpine, 8.3.26-alpine3.22, 8.3.26-cli-alpine, 8.3.26-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.13
4 weeks ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-fpm-alpine

Name8.1.33-fpm-alpine3.21
Digestsha256:3f6d33709f6648a334f44757f43bc6c9e4c4390b4ff555199f28377601455de9
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed2 months ago
Size32 MB
Packages60
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-fpm-alpine3.21, 8.1.33-fpm-alpine, 8.1.33-fpm-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-fpm-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-fpm-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
2 months ago



8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.26-fpm-alpine
  • 8.3.26-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



8.3-fpm-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.26-fpm-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.26
4 weeks ago



8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • 8.2-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
2 months ago



8.2-fpm-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
2 months ago



8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.13-fpm-alpine
  • 8.4.13-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
4 weeks ago



8.4-fpm-alpine3.21
Image has same number of vulnerabilities
Also known as:
  • 8.4.13-fpm-alpine3.21
  • 8-fpm-alpine3.21
  • fpm-alpine3.21
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
4 weeks ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:283bc5095ddb6ec6d6596dfb9f8d2eb04cf9e3be04ea855be7ebf548f67ff498
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages121
📦 Base Image php:7594c2581e3f8fffcf0f16338d2f97a001a068e7c7285197b721ad5d6cb2eced
also known as
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.22
  • 8.3.26-fpm-alpine
  • 8.3.26-fpm-alpine3.22
digestsha256:23bc3071de0155cc91ed48be24ca498a730460a6fa5bd0d517eaba07e753204b
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-fpm-alpine

Name8.3.26-fpm-alpine3.22
Digestsha256:23bc3071de0155cc91ed48be24ca498a730460a6fa5bd0d517eaba07e753204b
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed4 weeks ago
Size33 MB
Packages61
Flavoralpine
OS3.22
Runtime8.3.26
The base image is also available under the supported tag(s): 8.3-fpm-alpine3.22, 8.3.26-fpm-alpine, 8.3.26-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.13-fpm-alpine
  • 8.4.13-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
4 weeks ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:1689fee887986aef062f980ce70aaba4e33d2c517624cbba1d54884cb24200aa
vulnerabilitiescritical: 2 high: 2 medium: 0 low: 0
platformlinux/amd64
size73 MB
packages118
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • aeda52007687158f88915a60b395065c946a772587552d11e8e49511924585c9
digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.438%
EPSS Percentile62nd percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.251%
EPSS Percentile48th percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.152%
EPSS Percentile36th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.128%
EPSS Percentile33rd percentile
Description
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:bf2a7a8c6cd519eea3a3475323f8950b3dd407872d73865ef298419ec9bfe0e5
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size71 MB
packages121
📦 Base Image php:8.2-fpm-alpine
also known as
  • 8.2-fpm-alpine3.22
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • b4744cb64815673d45790b5eafa8eaf53ff99079651a94c25b9c42d388ece840
digestsha256:f3f076fbd8eeaa1c1df6e657068d0a45df9584f4290d3e8442c04bc60bc5c36d
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed2 months ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
2 months ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.13
4 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.13-alpine3.21
  • 8-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.13
4 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.26-cli-alpine
  • 8.3.26-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.26-alpine
  • 8.3.26-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.26-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.26-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.26
4 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
2 months ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
2 months ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:72c242c36dcf4579291d829b8af56a747d390522bb4068f16200db864c324d9a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size80 MB
packages120
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • fccdb165b72cc548a2b0efc5655b3307e7eea6db96216a117a60e80fae4ed828
digestsha256:7312bec7f935c80133ef7028fbf6d82d312be50fb833aa7f7fee0d405996352b
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-fpm-alpine

Name8.2.29-fpm-alpine3.22
Digestsha256:f3f076fbd8eeaa1c1df6e657068d0a45df9584f4290d3e8442c04bc60bc5c36d
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed2 months ago
Size32 MB
Packages61
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.29-fpm-alpine, 8.2.29-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.26-fpm-alpine
  • 8.3.26-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.13-fpm-alpine
  • 8.4.13-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
4 weeks ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.13-alpine3.22
Digestsha256:7312bec7f935c80133ef7028fbf6d82d312be50fb833aa7f7fee0d405996352b
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed4 weeks ago
Size41 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.13
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.13-alpine, 8.4.13-alpine3.22, 8.4.13-cli-alpine, 8.4.13-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:062a4ccf8f18f3971579b3587d3604add0695e011a6651c0c69e59971d770f11
vulnerabilitiescritical: 2 high: 3 medium: 0 low: 0
platformlinux/amd64
size91 MB
packages139
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • aeda52007687158f88915a60b395065c946a772587552d11e8e49511924585c9
digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.438%
EPSS Percentile62nd percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.251%
EPSS Percentile48th percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.152%
EPSS Percentile36th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.128%
EPSS Percentile33rd percentile
Description
critical: 0 high: 1 medium: 0 low: 0 setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

high 7.7: CVE--2025--47273 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range<78.1.1
Fixed version78.1.1
CVSS Score7.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
EPSS Score0.077%
EPSS Percentile24th percentile
Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details

 def _download_url(self, url, tmpdir): # Determine download filename # name, _fragment = egg_info_for_url(url) if name: while '..' in name: name = name.replace('..', '.').replace('\\', '_') else: name = "__downloaded__" # default if URL has no path contents if name.endswith('.[egg.zip](http://egg.zip/)'): name = name[:-4] # strip the extra .zip before download --> filename = os.path.join(tmpdir, name) 

Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:4dd32d6753014b1ff5adfec51076b381b7379be4eef5cc10aed674742fe8e38a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size99 MB
packages158
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • fccdb165b72cc548a2b0efc5655b3307e7eea6db96216a117a60e80fae4ed828
digestsha256:7312bec7f935c80133ef7028fbf6d82d312be50fb833aa7f7fee0d405996352b
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed2 months ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
2 months ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.13
4 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.13-alpine3.21
  • 8-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.13
4 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.26-cli-alpine
  • 8.3.26-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.26-alpine
  • 8.3.26-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.26-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.26-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.26
4 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
2 months ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
2 months ago



@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.13-alpine3.22
Digestsha256:7312bec7f935c80133ef7028fbf6d82d312be50fb833aa7f7fee0d405996352b
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed4 weeks ago
Size41 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.13
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.13-alpine, 8.4.13-alpine3.22, 8.4.13-cli-alpine, 8.4.13-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Oct 24, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:c3db61efe89803be85bb05e32b3a6389a355ed432735317b0859a8b52cdcf67e
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:74ac207bc0116b73c198b79097c2361bd6912313efa113924e020d0c351b6e34
also known as
  • 8.3-alpine
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.26-alpine
  • 8.3.26-alpine3.22
  • 8.3.26-cli-alpine
  • 8.3.26-cli-alpine3.22
digestsha256:990340d4a014d0090ec564f95d4fdca42b3cbeeaf8b9f0ac9105c1707cff72aa
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:65d37f41f75b0adda97aa9db3742eb819892a3d30a34b5b3a85ec03a4cd09b28
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • df7d2aca7d453249829e16923877c821823065f32a24e0eb2c66e7a12fd7b54b
digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
@github-actions
Copy link

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.26-alpine3.22
Digestsha256:990340d4a014d0090ec564f95d4fdca42b3cbeeaf8b9f0ac9105c1707cff72aa
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed4 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.26
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.26-alpine, 8.3.26-alpine3.22, 8.3.26-cli-alpine, 8.3.26-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.13
4 weeks ago



@github-actions
Copy link

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
Vulnerabilitiescritical: 2 high: 2 medium: 1 low: 3
Pushed2 months ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.13-cli-alpine
  • 8.4.13-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.13-alpine
  • 8.4.13-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.13
4 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.26-cli-alpine
  • 8.3.26-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.26-alpine
  • 8.3.26-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.26
4 weeks ago



Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci)

1 participant