Skip to content

deps(deps): update actions/checkout action to v4.3.1 #159

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

deps(deps): update actions/checkout action to v4.3.1 #159

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 11, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.2.2 -> v4.3.1

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) August 11, 2025 12:59
@renovate renovate bot requested a review from lotyp as a code owner August 11, 2025 12:59
@github-actions github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Aug 11, 2025
@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:8b7177769b700468fb00c9a162c2070128d3abe366d0a0cffd4a2789edd6bf6f
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size75 MB
packages121
📦 Base Image oisupport/staging-amd64:639b54f0afafe1a50d5dfdf4306b05aa09357ed7292390e3ed242ecfc57cc7e0
also known as
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • 8.4-fpm-alpine
  • 8.4-fpm-alpine3.22
  • 8.4.11-fpm-alpine
  • 8.4.11-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
digestsha256:dd4b38d02d63413f45aea06eaaf1ac2410b7cbe81b017efd3d6feefb142809b2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :639b54f0afafe1a50d5dfdf4306b05aa09357ed7292390e3ed242ecfc57cc7e0

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:f59356ae6255e1af8a07faa1415ebc567b97ba6069bb7779bf1e92adc0f8ee5d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size75 MB
packages120
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • d8f4974194fb8fae35528e5ff3f03ca3566ee2e502f953b7817e0cbefebf8a0d
digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:5d1073b8894feef5612ddaed848ec5869669dd210e98ba2c96eac16692d2d65b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size81 MB
packages120
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • e4f9bb894d0d59558802c50d63685a084b2b4fb7eb77398e783423beab34d48f
digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
 1 week ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
 1 week ago



@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.11-alpine3.22
Digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size42 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.11
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.11-alpine, 8.4.11-alpine3.22, 8.4.11-cli-alpine, 8.4.11-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:4bb96d522b4e1eb3e434c21f8ce301e4d40b98d9d13bcd43b9f2c004790c5fe2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size68 MB
packages119
📦 Base Image oisupport/staging-amd64:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.21
  • 8.1.33-fpm-alpine
  • 8.1.33-fpm-alpine3.21
  • da3eabe89d0c6c833838e3480d063d65f38577bc37dc976948b9352f3fb3d2fb
digestsha256:4268ab6c629f48d1f77ff76b70355c1f384d95028c301d7a9d07a5f1644d4072
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:26adf339150d94d9d218f0118183f9461b44ab6e5ced38a4086822b60c186dde
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • b026e7d2fc6d7801e1af55dc42c7409b2f38d6b42c32494e9276b6ef40a28ee3
digestsha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :8.1-fpm-alpine

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.24-alpine3.22
Digestsha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.24
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.24-alpine, 8.3.24-alpine3.22, 8.3.24-cli-alpine, 8.3.24-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
 1 week ago



@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:105dea39a793c2a43fff485ab8dacbb953f427b91f34ccc9ab0cc12966400ae8
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size100 MB
packages158
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • e4f9bb894d0d59558802c50d63685a084b2b4fb7eb77398e783423beab34d48f
digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:fca1d9b59fc8a32e04f401e689e6c96a2e184fd974e200cb2e65f8180aa94f15
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size71 MB
packages121
📦 Base Image php:2bc2a355c610a5ce2f4854d785c740aafe346f652caa7a4960796338a17a0ffe
also known as
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.22
  • 8.3.24-fpm-alpine
  • 8.3.24-fpm-alpine3.22
digestsha256:994a36314a28fed17d2d9d66ff694817dcf51343c7d42e1890ec75b3406a3caf
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:f192ed0bee30b894130e624de0880e455902681cdfb11029bd8f700ebb533fdf
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size94 MB
packages158
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • d8f4974194fb8fae35528e5ff3f03ca3566ee2e502f953b7817e0cbefebf8a0d
digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:5fe23f8bff0118a6c3142d9ff365e358b6a4c1d59b0d59c7b66a336e1f0dabc3
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages118
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • 84499e7665570bbef8ca20d15c642d8d9485a887d6be7a8b335ca33b5d3126f0
digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:148b038e25acb48e23a6a8d807986f4e3e9ee94b9607be42fe0acd911a4f251e
vulnerabilitiescritical: 0 high: 1 medium: 0 low: 0
platformlinux/amd64
size91 MB
packages139
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • 84499e7665570bbef8ca20d15c642d8d9485a887d6be7a8b335ca33b5d3126f0
digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 1 medium: 0 low: 0 setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

high 7.7: CVE--2025--47273 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range<78.1.1
Fixed version78.1.1
CVSS Score7.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
EPSS Score0.139%
EPSS Percentile35th percentile
Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details

    def _download_url(self, url, tmpdir):
        # Determine download filename
        #
        name, _fragment = egg_info_for_url(url)
        if name:
            while '..' in name:
                name = name.replace('..', '.').replace('\\', '_')
        else:
            name = "__downloaded__"  # default if URL has no path contents

        if name.endswith('.[egg.zip](http://egg.zip/)'):
            name = name[:-4]  # strip the extra .zip before download

 -->       filename = os.path.join(tmpdir, name)

Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.11-alpine3.22
Digestsha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size42 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.11
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.11-alpine, 8.4.11-alpine3.22, 8.4.11-cli-alpine, 8.4.11-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
 1 week ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
 1 week ago



@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-fpm-alpine

Name8.3.24-fpm-alpine3.22
Digestsha256:994a36314a28fed17d2d9d66ff694817dcf51343c7d42e1890ec75b3406a3caf
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size33 MB
Packages61
Flavoralpine
OS3.22
Runtime8.3.24
The base image is also available under the supported tag(s): 8.3-fpm-alpine3.22, 8.3.24-fpm-alpine, 8.3.24-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.11-fpm-alpine
  • 8.4.11-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
 1 week ago



@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
 1 week ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
 1 week ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.11-alpine3.21
  • 8-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.11
 1 week ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
 1 week ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.24-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.24
 1 week ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
 1 week ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
 1 week ago



1 similar comment
@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
 1 week ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
 1 week ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.11-alpine3.21
  • 8-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.11
 1 week ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
 1 week ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.24-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.24-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.24
 1 week ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
 1 week ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
 1 week ago



@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:93120cb45827b767a2867b84c12f68b2905e909e24da171bc21a83cb79e6b32e
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image php:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.24-alpine
  • 8.3.24-alpine3.22
  • 8.3.24-cli-alpine
  • 8.3.24-cli-alpine3.22
  • b026e7d2fc6d7801e1af55dc42c7409b2f38d6b42c32494e9276b6ef40a28ee3
digestsha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.24-alpine3.22
Digestsha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.24
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.24-alpine, 8.3.24-alpine3.22, 8.3.24-cli-alpine, 8.3.24-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.11-cli-alpine
  • 8.4.11-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.11-alpine
  • 8.4.11-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 42 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.11
 1 week ago



@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:10bbf4d97b8c681ecea4ad6f94931f53ffacb8fce3a04542902cb005a133f91a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size70 MB
packages121
📦 Base Image php:3effc26a4a8524994f6fd9e3c99f564bfdee610687d2d1d455996608118a910f
also known as
  • 8.2-fpm-alpine
  • 8.2-fpm-alpine3.22
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
digestsha256:a992b4453c7ffe21584867dced3a8b82c896603a10bfe3f7ec734729e26fcda5
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Aug 11, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-fpm-alpine

Name8.2.29-fpm-alpine3.22
Digestsha256:a992b4453c7ffe21584867dced3a8b82c896603a10bfe3f7ec734729e26fcda5
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed1 week ago
Size32 MB
Packages61
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.29-fpm-alpine, 8.2.29-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.24-fpm-alpine
  • 8.3.24-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.24
 1 week ago



8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.11-fpm-alpine
  • 8.4.11-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
 1 week ago



@renovate renovate bot force-pushed the renovate/actions-checkout-4.x branch from 7704791 to 4dee76b Compare November 18, 2025 02:27
@renovate renovate bot changed the title deps(deps): update actions/checkout action to v4.3.0 deps(deps): update actions/checkout action to v4.3.1 Nov 18, 2025
@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:57fd6380632dd8a39a2d4364ec91b98e0089a4512bd99e1a44ff7c9de490ccba
vulnerabilitiescritical: 2 high: 2 medium: 0 low: 0
platformlinux/amd64
size73 MB
packages118
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • aeda52007687158f88915a60b395065c946a772587552d11e8e49511924585c9
digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.324%
EPSS Percentile55th percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.186%
EPSS Percentile41st percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.382%
EPSS Percentile59th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.095%
EPSS Percentile27th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:bea5f49d6d24217fcaa68eaf830c5c4fe8e2f6b09cf4818d2085f973745f9f29
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size80 MB
packages120
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • aea9a2da6d41c26d48544950937d654f556bffe773f82fd3924823903f67b4f5
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:2b6cc047a297160fe1a49fe7634d3b0e15154da3fb3b20b8d89efcac184b8776
vulnerabilitiescritical: 2 high: 3 medium: 0 low: 0
platformlinux/amd64
size91 MB
packages139
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • aeda52007687158f88915a60b395065c946a772587552d11e8e49511924585c9
digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.324%
EPSS Percentile55th percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.186%
EPSS Percentile41st percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.382%
EPSS Percentile59th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.095%
EPSS Percentile27th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

high 7.7: CVE--2025--47273 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range<78.1.1
Fixed version78.1.1
CVSS Score7.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
EPSS Score0.090%
EPSS Percentile26th percentile
Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details

    def _download_url(self, url, tmpdir):
        # Determine download filename
        #
        name, _fragment = egg_info_for_url(url)
        if name:
            while '..' in name:
                name = name.replace('..', '.').replace('\\', '_')
        else:
            name = "__downloaded__"  # default if URL has no path contents

        if name.endswith('.[egg.zip](http://egg.zip/)'):
            name = name[:-4]  # strip the extra .zip before download

 -->       filename = os.path.join(tmpdir, name)

Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
 3 months ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
 3 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.14-alpine3.21
  • 8-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.14
 3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
 3 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.27-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.27
 3 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
 3 months ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
 3 months ago



@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.14-alpine3.22
Digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size41 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.14
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.14-alpine, 8.4.14-alpine3.22, 8.4.14-cli-alpine, 8.4.14-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:9ad77fa9665a4abc950c3a395cb07dd567db9de388c852e4fa1b42fc0d9e664a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size74 MB
packages121
📦 Base Image oisupport/staging-amd64:6606cb4b38b35f3ab0f5bff3d8af63f5d9fcacdb852bcbbc0249786594f199cb
also known as
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • 8.4-fpm-alpine
  • 8.4-fpm-alpine3.22
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
digestsha256:b9761938e7b22d04283840c8554b214e8d806297cc0c17aedf5285070071de32
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:6ea6044232f090e134fcab77c9d2cf310d46eaa7476409840dca824979944d74
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size99 MB
packages158
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • aea9a2da6d41c26d48544950937d654f556bffe773f82fd3924823903f67b4f5
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
 3 months ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
 3 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.14-alpine3.21
  • 8-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.14
 3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
 3 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.27-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.27
 3 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
 3 months ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
 3 months ago



@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :6606cb4b38b35f3ab0f5bff3d8af63f5d9fcacdb852bcbbc0249786594f199cb

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.14-alpine3.22
Digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size41 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.14
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.14-alpine, 8.4.14-alpine3.22, 8.4.14-cli-alpine, 8.4.14-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:fce4fd5dd512ff6b85746bb5605eebbac934a6ffbe9ad027b3a80085134153e7
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image oisupport/staging-amd64:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • b43d5d66195522c0d44e0b039379c7f5683beb802cdb41b84cf184b00ec592fb
digestsha256:3165264cd98fd5d3636a6338b7d22811b3f848d0f777f9180d00a6c015ac60fa
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:6df5a4081f30e5d4902d26b9922c935faeb083f2e4405cbc2aaaf4ae9a6ad3ad
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • df7d2aca7d453249829e16923877c821823065f32a24e0eb2c66e7a12fd7b54b
digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :8.3-alpine

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
 3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
 3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:52174542a3ebfc43054e4083418150b1cd2001cd941472f2a6dc3562af794300
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image oisupport/staging-amd64:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • b43d5d66195522c0d44e0b039379c7f5683beb802cdb41b84cf184b00ec592fb
digestsha256:3165264cd98fd5d3636a6338b7d22811b3f848d0f777f9180d00a6c015ac60fa
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:24e4322d84b6ee4e42239447632f0f720bfed287fc948117317eb55c1e33ab21
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages121
📦 Base Image php:8.3-fpm-alpine
also known as
  • 8.3-fpm-alpine3.22
  • 8.3.27-fpm-alpine
  • 8.3.27-fpm-alpine3.22
  • c9d65da38e61a3c75204e5c878b1a583d9fee27b0530835df57168426aea09b9
digestsha256:757dffdfc05493894b3e275577c7ddc369acfcca35e322da0209738b188afd89
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:342e4be7cf10ffba3006cb9bfa354992c77f6e6edf61bab0d22b5995c4895ad6
vulnerabilitiescritical: 2 high: 2 medium: 0 low: 0
platformlinux/amd64
size68 MB
packages119
📦 Base Image php:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.21
  • 8.1.33-fpm-alpine
  • 8.1.33-fpm-alpine3.21
  • a5705c7e8a9637ec417dc448b6afb91982a252f2f08a056af3166d3e0b36cc0e
digestsha256:3f6d33709f6648a334f44757f43bc6c9e4c4390b4ff555199f28377601455de9
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.324%
EPSS Percentile55th percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.186%
EPSS Percentile41st percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.382%
EPSS Percentile59th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.095%
EPSS Percentile27th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :8.3-alpine

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-fpm-alpine

Name8.1.33-fpm-alpine3.21
Digestsha256:3f6d33709f6648a334f44757f43bc6c9e4c4390b4ff555199f28377601455de9
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size32 MB
Packages60
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-fpm-alpine3.21, 8.1.33-fpm-alpine, 8.1.33-fpm-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-fpm-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-fpm-alpine3.22
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
 3 months ago



8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.27-fpm-alpine
  • 8.3.27-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
 3 weeks ago



8.3-fpm-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.27-fpm-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.27
 3 weeks ago



8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • 8.2-fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
 3 months ago



8.2-fpm-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine3.21
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
 3 months ago



8.4-fpm-alpine
Image introduces no new vulnerability but removes 5
Also known as:
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
 3 weeks ago



8.4-fpm-alpine3.21
Image introduces no new vulnerability but removes 5
Also known as:
  • 8.4.14-fpm-alpine3.21
  • 8-fpm-alpine3.21
  • fpm-alpine3.21
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
 3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 18, 2025 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-fpm-alpine

Name8.3.27-fpm-alpine3.22
Digestsha256:757dffdfc05493894b3e275577c7ddc369acfcca35e322da0209738b188afd89
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size33 MB
Packages61
Flavoralpine
OS3.22
Runtime8.3.27
The base image is also available under the supported tag(s): 8.3-fpm-alpine3.22, 8.3.27-fpm-alpine, 8.3.27-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
 3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 18, 2025

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:616cac6d81e01c5ccc9924dfe15d58deb6c08bf3cf465639516126178db23a53
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • df7d2aca7d453249829e16923877c821823065f32a24e0eb2c66e7a12fd7b54b
digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3

@github-actions
Copy link

github-actions bot commented Nov 18, 2025

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:0c05838b9495814479002cc1de580e4f73f0049c730d7672f33b47160574c6fb
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size71 MB
packages121
📦 Base Image php:8.2-fpm-alpine
also known as
  • 8.2-fpm-alpine3.22
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • b4744cb64815673d45790b5eafa8eaf53ff99079651a94c25b9c42d388ece840
digestsha256:f3f076fbd8eeaa1c1df6e657068d0a45df9584f4290d3e8442c04bc60bc5c36d
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3

@github-actions
Copy link

github-actions bot commented Nov 18, 2025

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
 3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
 3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 18, 2025

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-fpm-alpine

Name8.2.29-fpm-alpine3.22
Digestsha256:f3f076fbd8eeaa1c1df6e657068d0a45df9584f4290d3e8442c04bc60bc5c36d
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size32 MB
Packages61
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.29-fpm-alpine, 8.2.29-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.27-fpm-alpine
  • 8.3.27-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
 3 weeks ago



8.4-fpm-alpine
Image introduces no new vulnerability but removes 5
Also known as:
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
 3 weeks ago



Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lotyp lotyp Awaiting requested review from lotyp lotyp is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant