Vulnerability Reportalpine/k8s:1.33.13

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could cause denial of service through crafted CRL or CMS messages (CVE-2026-28388) or bypass TLS certificate validation under specific TLS configuration mutations (CVE-2025-68121). Many of these issues require non-default settings (e.g., enabling delta CRL flags or modifying TLS config between handshakes), so assess their applicability to your deployment. The image is from a popular community source and pinned by digest, but the high number of medium-severity vulnerabilities warrants remediation in your final image. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.