I'll top that: wireless-regdb out of date. Against an EC2-specific kernel.
Kernel headers out of date -> kernel vulnerability... in a container.
Kernel headers out of date -> kernel vulnerability... in a container.