Vulnerability Reportrust:1.96.1-slim

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most notable risks are binutils memory-corruption flaws such as CVE-2026-18220 and CVE-2026-6846, which can be triggered locally by processing a crafted ELF or XCOFF file, potentially leading to arbitrary code execution in an attacker-controlled CI/CD or developer environment. Although these require local file processing and do not meet the DANGEROUS threshold, the sheer volume (372 exposed findings) and the presence of multiple severity-6.63 issues warrant caution. Post-exploit exposure is low, with a max severity of 3.98 and no high-severity findings, so the primary concern is the inherited toolchain risk rather than runtime exploitation. Upgrading binutils or removing unused Binutils utilities would eliminate most of these findings. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.