How I was hacking docker containers by exploiting ImageMagick vulnerabilities

This article demonstrates how a known ImageMagick vulnerability (ImageTragick, CVE-2016-3714) in an outdated Node.js Docker base image can be exploited by uploading specially crafted images to achieve remote command execution inside the container; the author walks through a proof-of-concept that creates a file in the running container and uses the example to stress the importance of securing Docker base images and using tools like Snyk to detect and remediate such vulnerabilities.