Vulnerability Reportalmalinux:9.5-minimal

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. Exploiting the top findings could allow an attacker to bypass certificate validation (CVE-2026-42013) or trigger heap overreads in RSA key exchange (CVE-2026-5260), leading to spoofing, information disclosure, or denial of service. The exposed surface also includes 106 total vulnerabilities (27 at severity >= 6.0), but none reach severity 7.0, and the post-exploit-only findings are minimal (max 4.06) and require special configuration. As a general-purpose base image, the practical impact depends on which services the final image exposes; at minimum, update gnutls and glibc packages before deploying. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.