Vulnerability Reportamazonlinux:1

This base/runtime image is a clean foundation for building production images. It contains 11 post-exploit-only vulnerabilities, all of low severity (max 4.12) with no practical remote impact. The most notable CVE-2024-2961 in glibc requires the container to call iconv() on attacker-controlled strings, which does not occur in standard /bin/bash usage. No exposed vulnerabilities exist, and the image is officially published, making it a low-risk starting point. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.