Vulnerability Reportnode:18

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker exploiting the exposed flaws (e.g., CVE-2025-55298, CVE-2026-2005) could execute arbitrary code or cause heap corruption, potentially leading to full host takeover or service disruption. While the source is trusted and pinned by digest, the large exposure surface requires patching or upgrading affected packages before building production images. Post-exploitation findings are all low severity (max 5.0), so the primary concern is the exposed surface. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.