Vulnerability Reportruby:3

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could achieve code execution by tricking a user into running ldd on a malicious ELF (CVE-2019-1010023) or cause heap overflows via crafted image files (CVE-2018-16376). These vulnerabilities affect core libraries like glibc and openjpeg, and while some require user interaction, the large exposed surface area increases risk. The post-exploitation findings are low severity (max 4.64) and pose minimal additional risk. Disabling ldd or restricting ELF file processing would fully mitigate CVE-2019-1010023. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.