Vulnerability Reportnode:22.23.1-bookworm

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could achieve remote code execution (e.g., via CVE-2026-42217 and CVE-2026-8376) or cause a denial of service through crafted input. Note that some findings like CVE-2023-34152 require non-default ImageMagick configuration (--enable-pipes) to be exploitable. Despite being an official image with high trust, the number and severity of vulnerabilities demand remediation before use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.