Vulnerability Reportalpine/terragrunt:1.15.3

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could achieve remote code execution via command injection in git SSH operations (CVE-2026-45570) or bypass TLS certificate validation to perform man-in-the-middle attacks (CVE-2026-33810). Note that CVE-2025-68121 only applies if the TLS Config is mutated during session resumption, a non-default pattern. All findings require patching the base image or using updated versions. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.