🧰 Endor Labs Container Reachability

The items that name it 3

• PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) | Endor Labs
  advisory2026-10-21It is written here as Endor Labs container reachability (adds evidence on whether the affected OS package is used by the application at runtime).

  adds evidence on whether the affected OS package is used by the application at runtime

• EU Cyber Resilience Act: Preparing for December 11, 2027 | Endor Labs
  article2026-10-14It is written here as Endor Labs Container Reachability: reachability across runtime and OS layers; cuts container noise by up to 90%.
• The first part of the EU Cyber Resiliency Act comes into effect on September 11th. Are you Ready? | Blog | Endor Labs
  article2026-09-10

  Extends reachability analysis through runtime and OS layers of container images, classifying each package as Reachable, Potentially Reachable, or Unreachable; cuts container noise by up to 90% without requiring migration to distroless base images