Vulnerability Reportperl:5.40.4-threaded-trixie

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker with network access could exploit CVE-2026-56372 to leak sensitive information or cause denial of service, with no privileges or user interaction required. The image includes a large number of vulnerabilities (2,590 total) due to packages like ImageMagick, and post-exploit issues such as CVE-2019-1010022 could escalate attacks if a prior foothold is gained. Immediate remediation—such as updating ImageMagick or removing it if unused—is non-negotiable before any production use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.