Vulnerability Reportvarnish:9

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could achieve cache poisoning or authentication bypass via CVE-2026-34475, and trigger denial of service through glibc recursion flaws (CVE-2019-9192). While the image is official and trusted, the sheer volume and severity of exposed vulnerabilities, particularly in the primary network-facing Varnish service, make it unsuitable for production without extensive remediation.