Vulnerability Reportalmalinux:9.7-minimal-20260502

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The most notable issues are CVE-2026-42011 and CVE-2026-42012 in gnutls, which could allow certificate validation bypass and potential spoofing or man-in-the-middle attacks. CVE-2026-54369 in libacl enables local privilege escalation via symlink traversal if an attacker controls path components. All exposed vulnerabilities are at medium severity (max 6.29), and post-exploit findings are low (max 3.53), so the overall risk is manageable but should be addressed in final images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.