Threats tagged 'ghsa-vjcc-8rh5-xp2j'

FrankenPHP Docker images prior to version 1.1.11 were rebuilt only when new base image tags were released. This practice caused security fixes applied to Alpine, PHP, and Go under existing tags not to be propagated, leaving system libraries stale. Remote attackers could exploit known vulnerabilities in these outdated libraries, such as CVE-2025-15467 in libcrypto3, to execute arbitrary code. The vulnerability has a critical CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.