deps(deps): update docker/bake-action action to v5.10.0 #54

renovate · 2024-09-30T10:12:41Z

This PR contains the following updates:

Package	Type	Update	Change
docker/bake-action	action	minor	`v5.8.0` -> `v5.10.0`

Release Notes

docker/bake-action (docker/bake-action)

`v5.10.0`

Compare Source

Add allow input by @crazy-max in https://github.com/docker/bake-action/pull/253

Full Changelog: docker/bake-action@v5.9.0...v5.10.0

`v5.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.38.0 to 0.39.0 in https://github.com/docker/bake-action/pull/250

Full Changelog: docker/bake-action@v5.8.0...v5.9.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2024-09-30T10:13:29Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:80c5d9cca101fa204072dd176769dbe93ef492a5748797ccd67b80d2704549d4`
vulnerabilities
size	102 MB
packages	230

📦 Base Image php:8.2-fpm-alpine

also known as	`8.2-fpm-alpine3.20` `8.2.23-fpm-alpine` `8.2.23-fpm-alpine3.20`
digest	`sha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:31Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.2-fpm-alpine

Name	8.2.23-fpm-alpine3.20
Digest	sha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d
Vulnerabilities
Pushed	3 weeks ago
Size	32 MB
Packages	51
Flavor	alpine
OS	3.20
Runtime	8.2.23

The base image is also available under the supported tag(s): 8.2-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.2-fpm-alpine` Newer image for same tag Also known as: 8.2.24-fpm-alpine 8.2.24-fpm-alpine3.20 8.2-fpm-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	3 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.3.12-fpm-alpine 8.3.12-fpm-alpine3.20 8.3-fpm-alpine3.20 8-fpm-alpine 8-fpm-alpine3.20 fpm-alpine fpm-alpine3.20	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.20	3 days ago

github-actions · 2024-09-30T10:13:32Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:76bc189000c8475c0d5f54e70f5739ced0658b2d30d2cd06d5c6cf3d56274f4c`
vulnerabilities
size	108 MB
packages	229

📦 Base Image php:8-alpine

also known as	`8-alpine3.20` `8-cli-alpine` `8-cli-alpine3.20` `8.3-alpine` `8.3-alpine3.20` `8.3-cli-alpine` `8.3-cli-alpine3.20` `8.3.11-alpine` `8.3.11-alpine3.20` `8.3.11-cli-alpine` `8.3.11-cli-alpine3.20` `alpine` `alpine3.20` `cli-alpine` `cli-alpine3.20`
digest	`sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:32Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:51ca58f916a6144cdf8e338c21cea9645b967df28681eb3edbf48dcc01b30178`
vulnerabilities
size	127 MB
packages	247

📦 Base Image php:8-alpine

also known as	`8-alpine3.20` `8-cli-alpine` `8-cli-alpine3.20` `8.3-alpine` `8.3-alpine3.20` `8.3-cli-alpine` `8.3-cli-alpine3.20` `8.3.11-alpine` `8.3.11-alpine3.20` `8.3.11-cli-alpine` `8.3.11-cli-alpine3.20` `alpine` `alpine3.20` `cli-alpine` `cli-alpine3.20`
digest	`sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:34Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8-alpine

Name	8.3.11-alpine3.20
Digest	sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilities
Pushed	3 weeks ago
Size	37 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.3.11

The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8-alpine` Newer image for same tag Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine 8.3-alpine3.20 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8-alpine was pulled 1.6K times last month Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	3 days ago

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2024-09-30T10:13:34Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:a5bf495325ef720a13398cb920fa1164ae004bdc92f6f66c5b94defcf17502e7`
vulnerabilities
size	103 MB
packages	230

📦 Base Image php:8-fpm-alpine

also known as	`8-fpm-alpine3.20` `8.3-fpm-alpine` `8.3-fpm-alpine3.20` `8.3.11-fpm-alpine` `8.3.11-fpm-alpine3.20` `fpm-alpine` `fpm-alpine3.20`
digest	`sha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:35Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8-alpine

Name	8.3.11-alpine3.20
Digest	sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilities
Pushed	3 weeks ago
Size	37 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.3.11

The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8-alpine` Newer image for same tag Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine 8.3-alpine3.20 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8-alpine was pulled 1.6K times last month Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	3 days ago

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2024-09-30T10:13:36Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:97efa2b867587cec6d4e33790a325ed88f0a3b36425a99e4995aa7569d17e9d4`
vulnerabilities
size	107 MB
packages	229

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.20` `8.2-cli-alpine` `8.2-cli-alpine3.20` `8.2.23-alpine` `8.2.23-alpine3.20` `8.2.23-cli-alpine` `8.2.23-cli-alpine3.20`
digest	`sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:38Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8-fpm-alpine

Name	fpm-alpine3.20
Digest	sha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc
Vulnerabilities
Pushed	3 weeks ago
Size	32 MB
Packages	51
Flavor	alpine
OS	3.20

The base image is also available under the supported tag(s): 8-fpm-alpine3.20, 8.3-fpm-alpine, 8.3-fpm-alpine3.20, fpm-alpine, fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8-fpm-alpine` Newer image for same tag Also known as: 8.3.12-fpm-alpine 8.3.12-fpm-alpine3.20 8.3-fpm-alpine 8.3-fpm-alpine3.20 8-fpm-alpine3.20 fpm-alpine fpm-alpine3.20	Benefits: Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8-fpm-alpine was pulled 4.8K times last month Image details: Size: 33 MB Flavor: alpine OS: 3.20	3 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.2-fpm-alpine` Minor runtime version update Also known as: 8.2.24-fpm-alpine 8.2.24-fpm-alpine3.20 8.2-fpm-alpine3.20	Benefits: Same OS detected Minor runtime version update Image is smaller by 133 KB Tag was pushed more recently Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	3 days ago
`8.1-fpm-alpine` Minor runtime version update Also known as: 8.1.30-fpm-alpine 8.1.30-fpm-alpine3.20 8.1-fpm-alpine3.20	Benefits: Same OS detected Minor runtime version update Image is smaller by 642 KB Tag was pushed more recently Image has same number of vulnerabilities Image contains equal number of packages 8.1-fpm-alpine is the fourth most popular tag with 18K pulls per month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	3 days ago

github-actions · 2024-09-30T10:13:39Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.2-alpine

Name	8.2.23-alpine3.20
Digest	sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilities
Pushed	3 weeks ago
Size	36 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.2.23

The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.2-alpine` Newer image for same tag Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	3 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	3 days ago

github-actions · 2024-09-30T10:13:39Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:d60eb363cc8be742b35ca85ed4b03a2c32d9017e4d9b4560738565cce93578b7`
vulnerabilities
size	126 MB
packages	247

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.20` `8.2-cli-alpine` `8.2-cli-alpine3.20` `8.2.23-alpine` `8.2.23-alpine3.20` `8.2.23-cli-alpine` `8.2.23-cli-alpine3.20`
digest	`sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:41Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:9ceeb5bea0ce60886d1e71bc1a592dd613b7fe4d83140382db4701afd632ed52`
vulnerabilities
size	102 MB
packages	230

📦 Base Image php:8.1-fpm-alpine

also known as	`8.1-fpm-alpine3.20` `8.1.29-fpm-alpine` `8.1.29-fpm-alpine3.20`
digest	`sha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:43Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.2-alpine

Name	8.2.23-alpine3.20
Digest	sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilities
Pushed	3 weeks ago
Size	36 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.2.23

The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.2-alpine` Newer image for same tag Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	3 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	3 days ago

github-actions · 2024-09-30T10:13:44Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.1-fpm-alpine

Name	8.1.29-fpm-alpine3.20
Digest	sha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848
Vulnerabilities
Pushed	3 weeks ago
Size	31 MB
Packages	51
Flavor	alpine
OS	3.20
Runtime	8.1.29

The base image is also available under the supported tag(s): 8.1-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.1-fpm-alpine` Newer image for same tag Also known as: 8.1.30-fpm-alpine 8.1.30-fpm-alpine3.20 8.1-fpm-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.1-fpm-alpine was pulled 18K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	3 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.2-fpm-alpine` Minor runtime version update Also known as: 8.2.24-fpm-alpine 8.2.24-fpm-alpine3.20 8.2-fpm-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	3 days ago
`8.3-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.3.12-fpm-alpine 8.3.12-fpm-alpine3.20 8.3-fpm-alpine3.20 8-fpm-alpine 8-fpm-alpine3.20 fpm-alpine fpm-alpine3.20	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.20	3 days ago

github-actions · 2024-09-30T10:13:46Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:a9b08d443f9843fb845a923fe84a86cb752100eb899d59005faf174a8bd48c43`
vulnerabilities
size	107 MB
packages	229

📦 Base Image php:8.1-alpine

also known as	`8.1-alpine3.20` `8.1-cli-alpine` `8.1-cli-alpine3.20` `8.1.29-alpine` `8.1.29-alpine3.20` `8.1.29-cli-alpine` `8.1.29-cli-alpine3.20`
digest	`sha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-09-30T10:13:50Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.1-alpine

Name	8.1.29-alpine3.20
Digest	sha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilities
Pushed	3 weeks ago
Size	35 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.1.29

The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.1-alpine` Newer image for same tag Also known as: 8.1.30-cli-alpine 8.1.30-cli-alpine3.20 8.1-cli-alpine 8.1-cli-alpine3.20 8.1.30-alpine 8.1.30-alpine3.20 8.1-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.1-alpine was pulled 5.2K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	3 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	3 days ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	3 days ago

github-actions · 2024-10-02T18:17:31Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:2489ec9dd560151e39e1750b90e3346bf845ed361ba9776f8272528646dbca32`
vulnerabilities
size	102 MB
packages	230

📦 Base Image php:8.1-fpm-alpine

also known as	`8.1-fpm-alpine3.20` `8.1.29-fpm-alpine` `8.1.29-fpm-alpine3.20`
digest	`sha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:31Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:33064a7208b553a01fefade3018859cb1aae35567d445966a86076c6b17605cd`
vulnerabilities
size	102 MB
packages	230

📦 Base Image php:8.2-fpm-alpine

also known as	`8.2-fpm-alpine3.20` `8.2.23-fpm-alpine` `8.2.23-fpm-alpine3.20`
digest	`sha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:34Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.1-fpm-alpine

Name	8.1.29-fpm-alpine3.20
Digest	sha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848
Vulnerabilities
Pushed	3 weeks ago
Size	31 MB
Packages	51
Flavor	alpine
OS	3.20
Runtime	8.1.29

The base image is also available under the supported tag(s): 8.1-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.1-fpm-alpine` Newer image for same tag Also known as: 8.1.30-fpm-alpine 8.1.30-fpm-alpine3.20 8.1-fpm-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.1-fpm-alpine was pulled 18K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.2-fpm-alpine` Minor runtime version update Also known as: 8.2.24-fpm-alpine 8.2.24-fpm-alpine3.20 8.2-fpm-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago
`8.3-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.3.12-fpm-alpine 8.3.12-fpm-alpine3.20 8.3-fpm-alpine3.20 8-fpm-alpine 8-fpm-alpine3.20 fpm-alpine fpm-alpine3.20	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.20	5 days ago

github-actions · 2024-10-02T18:17:34Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.2-fpm-alpine

Name	8.2.23-fpm-alpine3.20
Digest	sha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d
Vulnerabilities
Pushed	3 weeks ago
Size	32 MB
Packages	51
Flavor	alpine
OS	3.20
Runtime	8.2.23

The base image is also available under the supported tag(s): 8.2-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.2-fpm-alpine` Newer image for same tag Also known as: 8.2.24-fpm-alpine 8.2.24-fpm-alpine3.20 8.2-fpm-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.3.12-fpm-alpine 8.3.12-fpm-alpine3.20 8.3-fpm-alpine3.20 8-fpm-alpine 8-fpm-alpine3.20 fpm-alpine fpm-alpine3.20	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.20	5 days ago

github-actions · 2024-10-02T18:17:37Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:467b7b6a39debf1b75e8f86be254ba21402327b2cb2dd47427c6f27071159bed`
vulnerabilities
size	125 MB
packages	247

📦 Base Image php:8.1-alpine

also known as	`8.1-alpine3.20` `8.1-cli-alpine` `8.1-cli-alpine3.20` `8.1.29-alpine` `8.1.29-alpine3.20` `8.1.29-cli-alpine` `8.1.29-cli-alpine3.20`
digest	`sha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:37Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:c1adaff9b1846c23ec21cb52ab637d2d04699c8d3db6c698b5ffd788b7539bbf`
vulnerabilities
size	126 MB
packages	247

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.20` `8.2-cli-alpine` `8.2-cli-alpine3.20` `8.2.23-alpine` `8.2.23-alpine3.20` `8.2.23-cli-alpine` `8.2.23-cli-alpine3.20`
digest	`sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:40Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.1-alpine

Name	8.1.29-alpine3.20
Digest	sha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilities
Pushed	3 weeks ago
Size	35 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.1.29

The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.1-alpine` Newer image for same tag Also known as: 8.1.30-cli-alpine 8.1.30-cli-alpine3.20 8.1-cli-alpine 8.1-cli-alpine3.20 8.1.30-alpine 8.1.30-alpine3.20 8.1-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.1-alpine was pulled 5.2K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	5 days ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago

github-actions · 2024-10-02T18:17:40Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.2-alpine

Name	8.2.23-alpine3.20
Digest	sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilities
Pushed	3 weeks ago
Size	36 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.2.23

The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.2-alpine` Newer image for same tag Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	5 days ago

github-actions · 2024-10-02T18:17:41Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:dff948327eb03160a863c19a436366d83d0ce87c9a0fee2de97f4c49b9eb54f6`
vulnerabilities
size	108 MB
packages	229

📦 Base Image php:8-alpine

also known as	`8-alpine3.20` `8-cli-alpine` `8-cli-alpine3.20` `8.3-alpine` `8.3-alpine3.20` `8.3-cli-alpine` `8.3-cli-alpine3.20` `8.3.11-alpine` `8.3.11-alpine3.20` `8.3.11-cli-alpine` `8.3.11-cli-alpine3.20` `alpine` `alpine3.20` `cli-alpine` `cli-alpine3.20`
digest	`sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:43Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:db356fb0db5cd47ba27a3916dded7004be6a9814e3822adb8433cc4e0ada4fa1`
vulnerabilities
size	107 MB
packages	229

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.20` `8.2-cli-alpine` `8.2-cli-alpine3.20` `8.2.23-alpine` `8.2.23-alpine3.20` `8.2.23-cli-alpine` `8.2.23-cli-alpine3.20`
digest	`sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:43Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:86583954b0b9a1acccae35ee72d75e91458b51da82f9537d247ffdc46a36538f`
vulnerabilities
size	103 MB
packages	230

📦 Base Image php:8-fpm-alpine

also known as	`8-fpm-alpine3.20` `8.3-fpm-alpine` `8.3-fpm-alpine3.20` `8.3.11-fpm-alpine` `8.3.11-fpm-alpine3.20` `fpm-alpine` `fpm-alpine3.20`
digest	`sha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:43Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:54860442955f23c2371b1b2d02d94e30a01447cd11ac4074e68dcbb68d92356e`
vulnerabilities
size	107 MB
packages	229

📦 Base Image php:8.1-alpine

also known as	`8.1-alpine3.20` `8.1-cli-alpine` `8.1-cli-alpine3.20` `8.1.29-alpine` `8.1.29-alpine3.20` `8.1.29-cli-alpine` `8.1.29-cli-alpine3.20`
digest	`sha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:45Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8-alpine

Name	8.3.11-alpine3.20
Digest	sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilities
Pushed	3 weeks ago
Size	37 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.3.11

The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8-alpine` Newer image for same tag Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine 8.3-alpine3.20 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8-alpine was pulled 1.6K times last month Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	5 days ago

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2024-10-02T18:17:46Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8-fpm-alpine

Name	fpm-alpine3.20
Digest	sha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc
Vulnerabilities
Pushed	3 weeks ago
Size	32 MB
Packages	51
Flavor	alpine
OS	3.20

The base image is also available under the supported tag(s): 8-fpm-alpine3.20, 8.3-fpm-alpine, 8.3-fpm-alpine3.20, fpm-alpine, fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8-fpm-alpine` Newer image for same tag Also known as: 8.3.12-fpm-alpine 8.3.12-fpm-alpine3.20 8.3-fpm-alpine 8.3-fpm-alpine3.20 8-fpm-alpine3.20 fpm-alpine fpm-alpine3.20	Benefits: Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8-fpm-alpine was pulled 4.8K times last month Image details: Size: 33 MB Flavor: alpine OS: 3.20	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.2-fpm-alpine` Minor runtime version update Also known as: 8.2.24-fpm-alpine 8.2.24-fpm-alpine3.20 8.2-fpm-alpine3.20	Benefits: Same OS detected Minor runtime version update Image is smaller by 133 KB Tag was pushed more recently Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago
`8.1-fpm-alpine` Minor runtime version update Also known as: 8.1.30-fpm-alpine 8.1.30-fpm-alpine3.20 8.1-fpm-alpine3.20	Benefits: Same OS detected Minor runtime version update Image is smaller by 642 KB Tag was pushed more recently Image has same number of vulnerabilities Image contains equal number of packages 8.1-fpm-alpine is the fourth most popular tag with 18K pulls per month Image details: Size: 32 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	5 days ago

github-actions · 2024-10-02T18:17:46Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.2-alpine

Name	8.2.23-alpine3.20
Digest	sha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilities
Pushed	3 weeks ago
Size	36 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.2.23

The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.2-alpine` Newer image for same tag Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	5 days ago

github-actions · 2024-10-02T18:17:46Z

Outdated

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8.1-alpine

Name	8.1.29-alpine3.20
Digest	sha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilities
Pushed	3 weeks ago
Size	35 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.1.29

The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8.1-alpine` Newer image for same tag Also known as: 8.1.30-cli-alpine 8.1.30-cli-alpine3.20 8.1-cli-alpine 8.1-cli-alpine3.20 8.1.30-alpine 8.1.30-alpine3.20 8.1-alpine3.20	Benefits: Patch runtime version update Same OS detected Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.1-alpine was pulled 5.2K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.1.30	5 days ago

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-alpine` Minor runtime version update Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine3.20 8-alpine 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	5 days ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.24-cli-alpine 8.2.24-cli-alpine3.20 8.2-cli-alpine 8.2-cli-alpine3.20 8.2.24-alpine 8.2.24-alpine3.20 8.2-alpine3.20	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.20 Runtime: 8.2.24	5 days ago

github-actions · 2024-10-02T18:17:47Z

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

📦 Image Reference wayofdev/php-dev:latest

digest	`sha256:1df85e42be749c301c80f0eb94ef0ffc573471f0378395627b579c36dbe4ab24`
vulnerabilities
size	127 MB
packages	247

📦 Base Image php:8-alpine

also known as	`8-alpine3.20` `8-cli-alpine` `8-cli-alpine3.20` `8.3-alpine` `8.3-alpine3.20` `8.3-cli-alpine` `8.3-cli-alpine3.20` `8.3.11-alpine` `8.3.11-alpine3.20` `8.3.11-cli-alpine` `8.3.11-cli-alpine3.20` `alpine` `alpine3.20` `cli-alpine` `cli-alpine3.20`
digest	`sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f`
vulnerabilities

stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.04%`
EPSS Percentile	`16th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Affected range	`<1.22.7`
Fixed version	`1.22.7`
EPSS Score	`0.19%`
EPSS Percentile	`56th percentile`

Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

github-actions · 2024-10-02T18:17:52Z

Recommended fixes for image `wayofdev/php-dev:latest`

Base image is php:8-alpine

Name	8.3.11-alpine3.20
Digest	sha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilities
Pushed	3 weeks ago
Size	37 MB
Packages	50
Flavor	alpine
OS	3.20
Runtime	8.3.11

The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

Tag	Details	Pushed	Vulnerabilities
`8-alpine` Newer image for same tag Also known as: 8.3.12-cli-alpine 8.3.12-cli-alpine3.20 8.3-cli-alpine 8.3-cli-alpine3.20 8-cli-alpine 8-cli-alpine3.20 cli-alpine cli-alpine3.20 alpine alpine3.20 8.3.12-alpine 8.3.12-alpine3.20 8.3-alpine 8.3-alpine3.20 8-alpine3.20	Benefits: Same OS detected Minor runtime version update Newer image for same tag Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages 8-alpine was pulled 1.6K times last month Image details: Size: 37 MB Flavor: alpine OS: 3.20 Runtime: 8.3.12	5 days ago

Change base image

✅ There are no tag recommendations at this time.

renovate bot requested a review from lotyp as a code owner September 30, 2024 10:12

renovate bot enabled auto-merge (rebase) September 30, 2024 10:12

github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Sep 30, 2024

deps(deps): update docker/bake-action action to v5.10.0

0cdccf2

renovate bot changed the title ~~deps(deps): update docker/bake-action action to v5.9.0~~ deps(deps): update docker/bake-action action to v5.10.0 Oct 2, 2024

renovate bot force-pushed the renovate/docker-bake-action-5.x branch from e880a8a to 0cdccf2 Compare October 2, 2024 18:16

way-finder-bot self-requested a review October 2, 2024 18:18

way-finder-bot self-assigned this Oct 2, 2024

way-finder-bot approved these changes Oct 2, 2024

View reviewed changes

renovate bot merged commit 189fb28 into master Oct 2, 2024

renovate bot deleted the renovate/docker-bake-action-5.x branch October 2, 2024 18:18

Uh oh!

deps(deps): update docker/bake-action action to v5.10.0 #54

deps(deps): update docker/bake-action action to v5.10.0 #54

Uh oh!

Conversation

renovate bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v5.10.0

v5.9.0

Configuration

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-dev:latest

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Sep 30, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-dev:latest

Refresh base image

renovate bot commented Sep 30, 2024 •

edited

Loading

`v5.10.0`

`v5.9.0`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Sep 30, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

Recommended fixes for image `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`

github-actions bot commented Oct 2, 2024 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-dev:latest`