Vulnerability Reportrust:1.97.0-slim-bookworm

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker who can induce a local user or CI pipeline to process a malicious binary could achieve memory corruption or arbitrary code execution via the binutils package (e.g., CVE-2026-18220), and the glibc recursion flaw (CVE-2019-9192) could cause denial of service. These require local access or crafted inputs, so they are not remotely exploitable by default; additionally, CVE-2026-18220 only applies if binutils is built with the non-default DLX backend. Limiting access to untrusted files and disabling that backend would fully mitigate the practical risk. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.