Vulnerability Reportrust:1.98.0

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most severe inherited finding is CVE-2026-44172, a SQL injection flaw in MariaDB client libraries with the max exposed severity of 9.1, which could let an attacker manipulate database queries if an application uses the affected big5 character set and text protocol, while CVE-2019-1010023 in glibc could enable code execution when ldd is run on a malicious ELF file. The image also has 2377 exposed findings and 854 post-exploit-only findings, but the post-exploit-only set maxes out at 4.64 and is lower priority. Upgrading the affected MariaDB and glibc packages in downstream images would remove the highest-risk inherited exposure. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.