Cache hits in a multi-stage Docker build but a vulnerable layer remains

A situation where an old base layer remains during build-speed optimization, causing a security patch to be missed.