Skip to content

phpmyadmin:latest has fixable critical vulnerabilities #472

Open

Description

@utrotzek

The Docker image uses dependencies with fixable critical vulnerabilities:

Image

CVE-2026-46633

May it possiblie to update that dependency to the suggested version?

Activity

  1. phil-sola commented on Nov 2, 2026

    @phil-sola

    Please can we get this updated if possible to patch the critical / high vulnerabilities found from twig 3.11.3?

  2. self-assigned this
    on Nov 2, 2026
  3. williamdes commented on Nov 2, 2026

    @williamdes
    Member

    I have a plan and a fix, it should land soon. The plan is to re-build phpMyAdmin from it's source code like we do to make an official release on the website. But that would enable Docker images to always be up to date.
    If you download a phpMyAdmin snapshot it would be the same tarball that is distributed into the Docker image.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions