Vulnerability Reporterlang:26

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The presence of critical vulnerabilities, such as CVE-2023-34152 (ImageMagick RCE) and CVE-2023-45853 (zlib heap overflow), means an attacker could execute arbitrary code or cause a denial of service if the image is used in an exposed environment. Note: CVE-2023-34152 specifically requires the --enable-pipes configuration to be present for exploitation. While the image is officially published, the high number of severe inherited flaws requires immediate attention. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.