Vulnerability Reportnode:latest

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit CVE-2026-44172 to inject SQL and compromise data confidentiality or integrity in applications that use the affected MariaDB client libraries, while CVE-2019-1010023 could allow code execution if a user runs ldd on a malicious ELF file. Note: CVE-2026-44172 only applies when the big5 character set is used with mysql_real_escape_string() and text protocol. The 704 post-exploit-only findings have a maximum severity of 4.5 and do not drive the verdict. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.