Vulnerability Reportamazonlinux:2.0.20260923.0

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The provided stats show 6 exposed findings and 19 post-exploit-only findings, but no exposed finding reaches severity 7.0 or higher; the top exposed item is CVE-2026-86143, a libxml2 integer overflow/data-integrity issue at severity 6.21. The post-exploit-only set has no finding at severity 6.0 or above and maxes at 3.57, so it does not raise the verdict further. Since this is a base image, treat the libxml2 finding as inherited risk and update or rebuild images that include this layer before production. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.