Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 17, 2025

This PR contains the following updates:

Package Type Update Change
DavidAnson/markdownlint-cli2-action action major v20.0.0 -> v21.0.0

Release Notes

DavidAnson/markdownlint-cli2-action (DavidAnson/markdownlint-cli2-action)

v21.0.0: Update markdownlint version (markdownlint-cli2 v0.19.0, markdownlint v0.39.0).

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) November 17, 2025 01:42
@renovate renovate bot requested a review from lotyp as a code owner November 17, 2025 01:42
@github-actions github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Nov 17, 2025
@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:672f4ef0569a0f41ad79eca8b6d534e7aae1e97646c4ab11438f1c2a08e5e3c4
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • df7d2aca7d453249829e16923877c821823065f32a24e0eb2c66e7a12fd7b54b
digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:741085403360ec70499c43f68696a24d0235fb1558698750b39dd92ea7e0fa37
vulnerabilitiescritical: 2 high: 2 medium: 0 low: 0
platformlinux/amd64
size73 MB
packages118
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • aeda52007687158f88915a60b395065c946a772587552d11e8e49511924585c9
digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.324%
EPSS Percentile55th percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.186%
EPSS Percentile41st percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.382%
EPSS Percentile59th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.095%
EPSS Percentile27th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
3 months ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
3 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.14-alpine3.21
  • 8-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.14
3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
3 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.27-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.27
3 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
3 months ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
3 months ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:b6de29ac67cf93ac4528adc18869677c3add9510240dbf23463d28daaa343ec7
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size80 MB
packages120
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • aea9a2da6d41c26d48544950937d654f556bffe773f82fd3924823903f67b4f5
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:7b6e1eba4318ff86a4ff4585e0463d4a0e5c5ef34fdf4f05edc74af214f85432
vulnerabilitiescritical: 2 high: 2 medium: 0 low: 0
platformlinux/amd64
size68 MB
packages119
📦 Base Image php:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.21
  • 8.1.33-fpm-alpine
  • 8.1.33-fpm-alpine3.21
  • a5705c7e8a9637ec417dc448b6afb91982a252f2f08a056af3166d3e0b36cc0e
digestsha256:3f6d33709f6648a334f44757f43bc6c9e4c4390b4ff555199f28377601455de9
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.324%
EPSS Percentile55th percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.186%
EPSS Percentile41st percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.382%
EPSS Percentile59th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.095%
EPSS Percentile27th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.14-alpine3.22
Digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size41 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.14
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.14-alpine, 8.4.14-alpine3.22, 8.4.14-cli-alpine, 8.4.14-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:a86574137907ec5c3f62cecd26d1f375d6844e0f4c6d1d7bd7441bc032b469c5
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size74 MB
packages121
📦 Base Image oisupport/staging-amd64:6606cb4b38b35f3ab0f5bff3d8af63f5d9fcacdb852bcbbc0249786594f199cb
also known as
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • 8.4-fpm-alpine
  • 8.4-fpm-alpine3.22
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
digestsha256:b9761938e7b22d04283840c8554b214e8d806297cc0c17aedf5285070071de32
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:041f921c10fe314ab2984886d18de0afd6fbef971deda25eba469d934105da31
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages121
📦 Base Image php:8.3-fpm-alpine
also known as
  • 8.3-fpm-alpine3.22
  • 8.3.27-fpm-alpine
  • 8.3.27-fpm-alpine3.22
  • c9d65da38e61a3c75204e5c878b1a583d9fee27b0530835df57168426aea09b9
digestsha256:757dffdfc05493894b3e275577c7ddc369acfcca35e322da0209738b188afd89
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:29b723a8f23364d213fbeb3cd5c081c615f0aea24880645a773113e15de3ccb2
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size99 MB
packages158
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • 8.4-alpine
  • 8.4-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • aea9a2da6d41c26d48544950937d654f556bffe773f82fd3924823903f67b4f5
  • alpine
  • alpine3.22
  • cli-alpine
  • cli-alpine3.22
digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is :6606cb4b38b35f3ab0f5bff3d8af63f5d9fcacdb852bcbbc0249786594f199cb

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-fpm-alpine

Name8.1.33-fpm-alpine3.21
Digestsha256:3f6d33709f6648a334f44757f43bc6c9e4c4390b4ff555199f28377601455de9
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size32 MB
Packages60
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-fpm-alpine3.21, 8.1.33-fpm-alpine, 8.1.33-fpm-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-fpm-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-fpm-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
3 months ago



8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.27-fpm-alpine
  • 8.3.27-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
3 weeks ago



8.3-fpm-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.27-fpm-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.27
3 weeks ago



8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • 8.2-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
3 months ago



8.2-fpm-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-fpm-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 32 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
3 months ago



8.4-fpm-alpine
Image introduces no new vulnerability but removes 5
Also known as:
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
3 weeks ago



8.4-fpm-alpine3.21
Image introduces no new vulnerability but removes 5
Also known as:
  • 8.4.14-fpm-alpine3.21
  • 8-fpm-alpine3.21
  • fpm-alpine3.21
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-fpm-alpine

Name8.3.27-fpm-alpine3.22
Digestsha256:757dffdfc05493894b3e275577c7ddc369acfcca35e322da0209738b188afd89
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size33 MB
Packages61
Flavoralpine
OS3.22
Runtime8.3.27
The base image is also available under the supported tag(s): 8.3-fpm-alpine3.22, 8.3.27-fpm-alpine, 8.3.27-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8-alpine

Name8.4.14-alpine3.22
Digestsha256:2c844e231b50b8f1b61669ca1406ab784ba1e8f48c4d6535576dfd588d3eabab
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size41 MB
Packages60
Flavoralpine
OS3.22
Runtime8.4.14
The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.14-alpine, 8.4.14-alpine3.22, 8.4.14-cli-alpine, 8.4.14-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:8e109c2669f427feb453d55126aace2dc8140c966424a8f791e90a6e0c618ae0
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • df7d2aca7d453249829e16923877c821823065f32a24e0eb2c66e7a12fd7b54b
digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:fc59a0dc014d5a2d8efc7fb033e042c77a334f29049f2808872c41ce27807d6a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size71 MB
packages121
📦 Base Image php:8.2-fpm-alpine
also known as
  • 8.2-fpm-alpine3.22
  • 8.2.29-fpm-alpine
  • 8.2.29-fpm-alpine3.22
  • b4744cb64815673d45790b5eafa8eaf53ff99079651a94c25b9c42d388ece840
digestsha256:f3f076fbd8eeaa1c1df6e657068d0a45df9584f4290d3e8442c04bc60bc5c36d
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-fpm-alpine

Name8.2.29-fpm-alpine3.22
Digestsha256:f3f076fbd8eeaa1c1df6e657068d0a45df9584f4290d3e8442c04bc60bc5c36d
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size32 MB
Packages61
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.29-fpm-alpine, 8.2.29-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.27-fpm-alpine
  • 8.3.27-fpm-alpine3.22
  • 8.3-fpm-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 33 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
3 weeks ago



8.4-fpm-alpine
Image introduces no new vulnerability but removes 5
Also known as:
  • 8.4.14-fpm-alpine
  • 8.4.14-fpm-alpine3.22
  • 8.4-fpm-alpine3.22
  • 8-fpm-alpine
  • 8-fpm-alpine3.22
  • fpm-alpine
  • fpm-alpine3.22
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.29-alpine3.22
Digestsha256:8c201df34c610be6d54a158ac62310c15b7370bfb3777508188c07513787caa0
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.2.29
The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:50d3bb83314b2aafbf0969405f7d37e0ac2f495ee2812ea90d9f747744b8a7bd
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages120
📦 Base Image php:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • b43d5d66195522c0d44e0b039379c7f5683beb802cdb41b84cf184b00ec592fb
digestsha256:3165264cd98fd5d3636a6338b7d22811b3f848d0f777f9180d00a6c015ac60fa
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.27-alpine3.22
Digestsha256:3165264cd98fd5d3636a6338b7d22811b3f848d0f777f9180d00a6c015ac60fa
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.27
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.27-alpine, 8.3.27-alpine3.22, 8.3.27-cli-alpine, 8.3.27-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
3 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:12201d074876fdda7698c69adff91acbcc22cd0eee5395c7e9d8e6866c2dbdb5
vulnerabilitiescritical: 2 high: 3 medium: 0 low: 0
platformlinux/amd64
size91 MB
packages139
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.33-alpine
  • 8.1.33-alpine3.21
  • 8.1.33-cli-alpine
  • 8.1.33-cli-alpine3.21
  • aeda52007687158f88915a60b395065c946a772587552d11e8e49511924585c9
digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
critical: 2 high: 2 medium: 0 low: 0 libxml2 2.13.4-r6 (apk)

pkg:apk/alpine/libxml2@2.13.4-r6?os_name=alpine&os_version=3.21

critical : CVE--2025--49796

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.324%
EPSS Percentile55th percentile
Description

critical : CVE--2025--49794

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.186%
EPSS Percentile41st percentile
Description

high : CVE--2025--6021

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.382%
EPSS Percentile59th percentile
Description

high : CVE--2025--49795

Affected range<2.13.9-r0
Fixed version2.13.9-r0
EPSS Score0.095%
EPSS Percentile27th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

high 7.7: CVE--2025--47273 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range<78.1.1
Fixed version78.1.1
CVSS Score7.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
EPSS Score0.090%
EPSS Percentile26th percentile
Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details

    def _download_url(self, url, tmpdir):
        # Determine download filename
        #
        name, _fragment = egg_info_for_url(url)
        if name:
            while '..' in name:
                name = name.replace('..', '.').replace('\\', '_')
        else:
            name = "__downloaded__"  # default if URL has no path contents

        if name.endswith('.[egg.zip](http://egg.zip/)'):
            name = name[:-4]  # strip the extra .zip before download

 -->       filename = os.path.join(tmpdir, name)

Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

@github-actions
Copy link

github-actions bot commented Nov 17, 2025

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.33-alpine3.21
Digestsha256:b2694ec936f57efe2633da0a83e055af8e7ccf4a08274fb299396c8a2fa12285
Vulnerabilitiescritical: 2 high: 2 medium: 2 low: 3
Pushed3 months ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.33
The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.1-alpine3.22
Patch runtime version update
Also known as:
  • 8.1.33-cli-alpine3.22
  • 8.1-cli-alpine3.22
  • 8.1.33-alpine3.22
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.1.33
3 months ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
3 weeks ago



8.4-alpine3.21
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine3.21
  • 8.4-cli-alpine3.21
  • 8-cli-alpine3.21
  • cli-alpine3.21
  • alpine3.21
  • 8.4.14-alpine3.21
  • 8-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.4.14
3 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.27
3 weeks ago



8.3-alpine3.21
Minor runtime version update
Also known as:
  • 8.3.27-cli-alpine3.21
  • 8.3-cli-alpine3.21
  • 8.3.27-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 5
  • Image contains equal number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.3.27
3 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine
  • 8.2.29-cli-alpine3.22
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.22
  • 8.2.29-alpine
  • 8.2.29-alpine3.22
  • 8.2-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.29
3 months ago



8.2-alpine3.21
Minor runtime version update
Also known as:
  • 8.2.29-cli-alpine3.21
  • 8.2-cli-alpine3.21
  • 8.2.29-alpine3.21
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.21
  • Runtime: 8.2.29
3 months ago



@github-actions
Copy link

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:043dd8d4527be9e8119036cc62fe1f4d68b161063276f4bae5c612a9faef20a8
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages158
📦 Base Image php:8.3-alpine
also known as
  • 8.3-alpine3.22
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.22
  • 8.3.27-alpine
  • 8.3.27-alpine3.22
  • 8.3.27-cli-alpine
  • 8.3.27-cli-alpine3.22
  • b43d5d66195522c0d44e0b039379c7f5683beb802cdb41b84cf184b00ec592fb
digestsha256:3165264cd98fd5d3636a6338b7d22811b3f848d0f777f9180d00a6c015ac60fa
vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2

@github-actions
Copy link

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3.27-alpine3.22
Digestsha256:3165264cd98fd5d3636a6338b7d22811b3f848d0f777f9180d00a6c015ac60fa
Vulnerabilitiescritical: 0 high: 0 medium: 2 low: 2
Pushed3 weeks ago
Size37 MB
Packages60
Flavoralpine
OS3.22
Runtime8.3.27
The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.27-alpine, 8.3.27-alpine3.22, 8.3.27-cli-alpine, 8.3.27-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.14-cli-alpine
  • 8.4.14-cli-alpine3.22
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.22
  • 8-cli-alpine
  • 8-cli-alpine3.22
  • cli-alpine
  • cli-alpine3.22
  • alpine
  • alpine3.22
  • 8.4.14-alpine
  • 8.4.14-alpine3.22
  • 8.4-alpine3.22
  • 8-alpine
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.14
3 weeks ago



Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant