image-builder vulnerabilities