Vulnerability Reportelixir:1.17

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could execute arbitrary code (e.g., via heap overflows in aom or command injection in ImageMagick) leading to full system compromise. Note that CVE-2023-34152 requires ImageMagick's --enable-pipes configure option, which is non-default, reducing its exploitability in standard deployments. However, the overall vulnerability load demands immediate package updates or replacement of the base image. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.