Vulnerability Reportnode:24

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could trigger arbitrary code execution or denial of service by feeding crafted files to applications that use the bundled libraries (e.g., CVE-2009-3546 and CVE-2023-5841). While the post-exploit findings are numerous, they are all low severity (max 4.69), so the immediate concern is the exposed high-severity surface. Rebuilding from a patched base image before creating the final production image would eliminate these inherited risks. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.