Vulnerability Reportruby:3.3.11-trixie

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most critical is CVE-2026-56372 in ImageMagick (severity 9.1), which could allow an attacker to read sensitive memory or cause denial of service if an affected service processes image input. While the image is official and trusted, the sheer volume of exposed flaws (1661) demands remediation in downstream images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.