Vulnerability Reportrust:1.96.1-trixie

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit CVE-2019-1010023 to execute arbitrary code via ldd on a malicious ELF, or leverage CVE-2026-49261 for arbitrary code execution if wsrep_notify_cmd is enabled. Disabling the wsrep_notify_cmd option fully mitigates CVE-2026-49261. While the image is official and trusted, the high volume of high-severity exposed vulnerabilities demands remediation before production use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.