Vulnerability Reportelixir:1.20

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit heap-based buffer overflows in OpenJPEG (CVE-2018-16376) or out-of-bounds memory access in Mesa (CVE-2026-40393) to achieve remote code execution or data exposure. Note that CVE-2019-1010023 requires a user to run 'ldd' on a malicious ELF, which reduces its practical exploitability in typical server environments. Disabling unused components like OpenJPEG or Mesa WebGPU support can fully eliminate those specific risks. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.