Vulnerability Reportrust:1.96.1-bookworm

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit buffer overflows in image parsing (CVE-2009-3546) or the glibc ldd flaw (CVE-2019-1010023) to achieve arbitrary code execution on systems where the final application processes untrusted files. The high number of exposed vulnerabilities, particularly those with severity >= 7, means that final images should restrict untrusted input processing and keep the base image updated. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.