Vulnerability Reporterlang:latest

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit CVE-2019-1010023 (glibc) by tricking a user into running ldd on a malicious ELF, leading to arbitrary code execution, or leverage CVE-2016-9580 (openjpeg) to cause heap overflows resulting in RCE or DoS. Note that many of these vulnerabilities require user interaction, reducing exploitability in automated environments. Prioritize updating glibc and openjpeg to patched versions in your final image. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.