Vulnerability Reportperl:5.38

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker exploiting these vulnerabilities could achieve remote code execution, potential data access, or denial of service, depending on the application's use of the affected libraries. Mitigations include ensuring ldd is not used on untrusted files (CVE-2019-1010023) and noting that CVE-2026-44170 only applies to MariaDB on Windows hosts. The high volume of vulnerabilities demands thorough patching in derived images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.