Vulnerability Reportalmalinux:10.1-minimal-20260425

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The image contains 63 known exposed vulnerabilities and 6 post-exploit-only findings, but none reach high severity (>=7.0). The most notable issues are CVE-2026-42011 and CVE-2026-54369, which could enable certificate validation bypass and local privilege escalation, respectively, in a production context. While these are moderate-risk findings, they should be addressed by patching the underlying packages or applying compensating controls before images built on this base are deployed. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.