Vulnerability Reportcalico/node:latest

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could exploit these to cause denial of service, gain unauthorized access to sensitive data, or potentially execute arbitrary code on the host. For example, CVE-2023-44487 enables a remote DoS, while CVE-2024-24790 could lead to memory corruption. Note that some vulnerabilities, like CVE-2022-0778, require parsing malicious certificates, which may limit exploitation in some network configurations. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.