Vulnerability Reportjetbrains/teamcity-server:2026.1.1

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit CVE-2016-1000027 to achieve remote code execution on the TeamCity server, or leverage CVE-2021-33813 for denial of service via XML external entity injection. CVE-2024-38819 only applies if the application uses WebMvc.fn or WebFlux.fn to serve static resources; if these are not used, this vulnerability is not exploitable. The high number of total vulnerabilities (1684) combined with multiple critical severity findings make this image unsuitable for any production deployment without extensive remediation.