PHP Vulnerability Responses by Company

Docker

Global cloud / infrastructure
Aliases / services
ドッカー / Docker Official Images / Docker Hardened Images / Docker
Official website
https://www.docker.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Docker Official Images (PHP)

Response status
Patched images released
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Available on Docker Hub and Amazon ECR.

Scope: Pulling does not replace running containers.

What users should do

Rebuild and redeploy.

Official service URL

Source URLs

  1. PHP2Shell security update for Docker customershttps://www.docker.com/blog/security-update-on-php2shell-impact-for-docker-customers/Response evidence

Docker Hardened Images (PHP)

Response status
Patched images released
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 available.

Scope: Scope: PHP inside images.

What users should do

Redeploy the patched branch.

Official service URL

Source URLs

  1. PHP2Shell security update for Docker customershttps://www.docker.com/blog/security-update-on-php2shell-impact-for-docker-customers/Response evidence
Related official sources
  1. PHP2Shell security update for Docker customersOfficial notice

Comments