Vulnerability Reportgcc:latest

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit CVE-2026-56372 to read sensitive memory or cause denial of service, while CVE-2019-1010023 may permit code execution under specific conditions (e.g., running ldd on untrusted files). Although the official trust status lowers supply chain risk, the high volume of exposed vulnerabilities—particularly those with network-accessible, low-complexity attack vectors—demands remediation before production use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.