Vulnerability Reportrust:1.94.1-bookworm

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. Attackers could potentially achieve remote code execution or denial of service through ImageMagick (CVE-2026-25971) and OpenSSL (CVE-2026-45447) flaws if the image processes untrusted input. While the post-exploit-only findings are numerous, their maximum severity is 4.86, so they are less concerning. The image is officially published and pinned, but existing vulnerabilities require attention in derived images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.