This image is safe for production use. Although three vulnerabilities are recorded in the scan, all have a severity score of 0.0, meaning they are not exploitable in practice. The image is pinned by digest, published by a reputable source (Anchore), and has no reachable findings in the exposed surface or post-exploit categories. No further action is required.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-42504 | NONE0 | stdlib v1.26.3 fixed in 1.25.11, 1.26.4 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27145 | NONE0 | stdlib v1.26.3 fixed in 1.25.11, 1.26.4 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-42507 | NONE0 | stdlib v1.26.3 fixed in 1.25.11, 1.26.4 | 0.3% Theoretical Threat | Not Applicable |