Vulnerability Reportperl:5.40.4-threaded-trixie

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could execute arbitrary code via glibc's ldd (CVE-2019-1010023) or trigger heap overflows via OpenJPEG (CVE-2016-9581), potentially compromising the host or accessing sensitive data. Note that CVE-2026-44170 only affects Windows environments and requires the CONNECT engine and REST support, which are unlikely in this Linux Perl image. Despite the official trust, the high number of severe exposures (362 with severity >=6.0) demands remediation before production deployment. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.