Dockerfile Patterns and Secure Runtime Arguments
By default, container runtimes execute application processes as the root user. If an exploit exists in your web framework, attackers can escape the container namespace and compromise the entire host operating system.
