Vulnerability Reportelectronuserland/builder:24-wine

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker with a foothold inside the container could chain memory-corruption flaws in the bundled graphics and utility libraries to execute arbitrary code, and locally escalate to root via CVE-2026-50292. Most of the exposed surface, however, sits in GUI, Mesa and Qt components that a build-only container rarely reaches, and the 363 post-exploit findings are all low severity (none at or above 6.0), while the image itself comes from a heavily used, digest-pinned community publisher. Note that the pnpm dependency-install issue CVE-2025-69264 only applies if a git-hosted dependency is used and pnpm install is run during the build.