Vulnerability Reportelixir:1.18

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit these vulnerabilities to execute arbitrary code, access sensitive data, or perform SQL injection attacks. Many of the critical flaws reside in libraries (e.g., MariaDB, OpenEXR) that may not be actively used by Elixir itself but are nevertheless present. Post-exploit findings are low severity and not immediately exploitable. Building on this base requires thorough remediation, especially for the most severe CVEs. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.