Vulnerability Reportjoomla:latest

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker can exploit CVE-2026-56372 (severity 9.1) in ImageMagick by uploading a malicious image, leading to information disclosure or denial of service, or CVE-2026-6653 (severity 8.33) in libxml2 via crafted XML to achieve remote code execution, compromising the Joomla instance. Note that some vulnerabilities, such as the Perl heap overflow, may require 32-bit builds, and another ImageMagick RCE (CVE-2023-34152) requires the non-default --enable-pipes configuration; however, even without these, 49 high-severity exposed vulnerabilities (severity >=7.0) are remotely exploitable with no special prerequisites. Immediate remediation is required, and deployment of any alternative image is strongly advised.