Vulnerability Reportgolang:tip-20260613

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. Exploiting the glibc recursion issue (CVE-2019-9192) can lead to denial of service, and the krb5 integer overflow (CVE-2018-5709) could allow integrity bypass when processing Kerberos dump files. These require specific conditions (crafted regex or access to dump data), so practical impact is limited for typical deployments, but patching or rebuilding with updated packages is strongly recommended. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.