Vulnerability Reportruby:3.2.9

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit ImageMagick heap overflow (CVE-2026-56372) to leak sensitive data or cause denial of service, and the glibc issue (CVE-2019-1010023) may enable code execution if ldd is run on a malicious ELF. Disabling ImageMagick or restricting its use would fully mitigate the highest-severity findings. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.